Allied Telesis AR Series - Setting up and Configuring UTM Offload; Setting up UTM Offload

C613-22104-00 REV B Setting up UTM Offload | Page 53
Setting up and Configuring UTM Offload Advanced Network Protection
Setting up and Configuring UTM
Offload
Setting up UTM Offload
These are the steps, described in more detail below, are required to set up UTM Offload:
 Purchase, download, and install the UTM Offload license on the AR4050S
 Enable UTM Offload on the AR4050S (the forwarding device)
 Set up the offload device
Purchasing, downloading, and installing the UTM Offload license
You only require a UTM Offload subscription license on the AR4050S, you do not need a license on
the offload device as well. For information on purchasing, downloading, and installing the UTM
Offload subscription license, see the Licensing Feature Overview Guide.
Enabling UTM Offload on the AR4050S
To enable UTM Offload on the AR4050S, you must have a direct Ethernet connection between the
offload device and the AR4050S, i.e. from the Gigabit eth1 or eth2 port on the AR4050S to an
Ethernet port on the offload device. The Ethernet connection must support a MTU of 1588 or higher.
For more detail, see "Setting up the offload device" on page 54.
As an example, to enable UTM Offload and configure interface eth2 and subnet 192.168.100.0/24 to
boot and communicate with, and manage the offload device, use the following commands:
awplus#configure terminal
awplus(config)#utm-offload interface eth2 subnet 192.168.100.0/24
To disable UTM Offload, use the following command:
awplus(config)#no utm-offload
Configuration notes
The MTU of the UTM Offload device interface is set to 1582 to support the overhead required for the
standard Ethernet frames. You can not change this setting.
When configured, the interface of the forwarding device, which connects to the UTM Offload device,
is automatically assigned an IP address which is the lowest usable address in the subnet. The
interface is reserved for communication with the UTM Offload device and you should not manually
configure this interface. The configured IP subnet used for UTM Offload is visible in the show utm-
offload command, However the assigned IP address is not visible.