Configuring the management ports. Forcepoint S5032, S7032

Configuring the management ports

You must enable the dedicated management ports, Remote Management Module, and connect to the Remote

Management Module web interface to manage network traffic.

Note: Model 1402-C3 does not have a RMM. Use any of the fixed Ethernet ports as a management port.

Configure a dedicated management port

The dedicated management ports are disabled by default. To configure and enable a dedicated management port, perform these steps.

1. Create a zone for the management network.

2. Configure the NIC that corresponds to the dedicated management port and assign it to the management zone.

3. Create or modify access control rules to allow the appropriate management traffic.

Related concepts

Dedicated management ports on page 10

Dedicated management ports are 10/100/1000 RJ45 copper ports that provide additional network connection options for management traffic.

Configure the Remote Management Module

The Remote Management Module is disabled by default. Perform these tasks to configure and use the Remote

Management Module port.

If the appliance is deployed in a production environment, schedule a maintenance interval to enable the Remote

Management Module.

Related concepts

Remote Management Module port on page 10

The Remote Management port is a 10/100 RJ45 copper port that provides system management features independent from the Sidewinder operating system.

Connect the Remote Management Module port

To use the Remote Management Module, connect the Remote Management Module port to a network.

CAUTION: We recommend connecting the Remote Management Module port to a dedicated management network that meets the security needs of your organization.

Enable the Remote Management Module

Perform these steps to configure and enable the Remote Management Module.

1. Enter the appliance BIOS menu.

1. Restart or turn on the appliance.

Configuring the management ports |

19

2. Press F2 to enter the BIOS menu.

3. Navigate to the

Server Management

tab.

4. Select

BMC LAN Configuration

.

2. Configure the following options:

• IP address

• Subnet mask

• Gateway IP address

3. In the User configuration area, specify at least one user that will be allowed to access the appliance from a remote host.

1. In the

User ID

field, select the user ID that you want to configure.

Tip: The appliance has five user IDs for user information: anonymous, root, User3,

User4, and User5. Each user ID can be enabled or disabled and assigned a privilege.

2. Configure the following options:

• Privilege

• User name

• User password

3. In the

User status

field, select

Enable

to activate the user ID.

4. Press F10 to exit the BIOS and save the changes.

Connect to the Remote Management Module web interface

Perform these steps to connect to the Remote Management Module web interface from a remote computer.

1. In a web browser, go to https://

<IP of Remote Management Module>

. The first time you connect, accept the SSL certificate.

2. Specify a user name and password, then click

Login

. The homepage appears.

3. Click the tab that corresponds to the task you want to perform.

Tip: For option descriptions, click

Help

.

Table 11: Web interface tabs

Tab

System Information

Server Health

Configuration

Remote Control

Task

View appliance information

• View sensor readings

• View the event log

• Configure Remote Management Module network settings

• Manage Remote Management Module users

• Upload a new SSL certificate

• Configure LDAP (Lightweight Directory Access

Protocol)

• Access the appliance console

• Turn the appliance on or off

Configuring the management ports |

20

CAUTION: When modifying network settings for the Remote Management Module on the

Configuration tab, select

Intel(R) RMM3

from the

LAN Channel

drop-down list. Do not configure the Baseboard Mgmt LAN channel.

Configuring the management ports |

21