The Cato Socket X1700 is a network appliance designed for deployment in a typical site topology where it replaces an existing firewall, connecting the local area network (LAN) to the Cato Cloud. It serves as a secure gateway, facilitating Internet connectivity and integrating with Cato's Software-Defined Wide Area Network (SD-WAN) and Security as a Service (SaaS) offerings. The device supports various network configurations, including DHCP or statically-assigned WAN IP addresses, and accommodates different LAN ranges and DHCP assignments.
Important Technical Specifications:
The X1700 Socket comes in two hardware models, X1700 and X1700B, each with distinct front panel layouts and firmware images.
X1700 Socket:
- Storage Drives: The device includes storage drives, though specific capacity is not detailed.
- Expansion Slots: It features expansion slots for network card add-ons, supporting:
- 2 x 1Gbps fiber
- 4 x 1Gbps copper
- 2 x 10Gbps fiber
- 4 x 10Gbps fiber
- 8 x 1Gbps
- Management Port: A dedicated management port connects to the Socket WebUI for configuration and monitoring.
- Front Panel Ports:
- WAN Ports (1-4): These are network ports for connecting to Internet Service Providers (ISPs).
- LAN Ports (5-8): These ports connect to the internal network.
- USB Ports (USB1, USB2): USB2 port can be used for reimaging the Socket with flash drives.
- FD Button: Reserved for future use.
- Reset Button: Restarts the Socket.
- LED Indicators:
- Network Port LEDs (Left LED - Activity, Right LED - Link Speed):
- Left LED (Activity): No color (disconnected), green steady (connectivity), green blinking (active traffic).
- Right LED (Link Speed): No color (10 Mbit/s), green (100 Mbit/s), amber (1000 Mbit/s).
- Power LED: Off (powered off), on (powered on).
- HDD LED: Off (inactive), on blinking (accessing data).
X1700B Socket:
- Storage Drives: Similar to the X1700, it includes storage drives.
- Expansion Slots: Supports the same network card add-ons as the X1700:
- 2 x 1Gbps fiber
- 4 x 1Gbps copper
- 2 x 10Gbps fiber
- 4 x 10Gbps fiber
- Front Panel Ports:
- Management and USB Ports: Includes dedicated management and USB ports.
- WAN Ports (1-4): Network ports for ISP connections.
- LAN Ports (5-8): Connect to the internal network.
- COM Port: Console port used by Support for troubleshooting.
- USB Ports: Can use USB 2.0 or 1.0 flash drives to reimage the X1700B Socket.
- Buttons:
- Power Button: Powers on and off the Socket.
- Reset Button: Resets the Socket.
- LED Indicators:
- Power LED: Off (powered off), on (powered on).
- HDD LED: Off (inactive), on blinking (accessing data).
- Network Port LEDs (Left LED - Activity, Right LED - Link Speed):
- Left LED (Activity): No color (disconnected), green steady (connectivity), green blinking (active traffic).
- Right LED (Link Speed): No color (10 Mbit/s), green (100 Mbit/s), amber (1000 Mbit/s).
Usage Features:
- Site Creation and Configuration: The Cato Management Application allows administrators to create new sites, define site type (e.g., Headquarters), and configure connection type (Socket X1700).
- WAN Interface Settings: Administrators can configure WAN bandwidth (Downstream/Upstream) for WAN1 and WAN2 links. The option to "Enable WAN2" is crucial for secondary ISP connections to prevent connectivity loss.
- LAN Interface Settings: Configuration of the LAN Native Range is supported, with a restriction against using /31 or /32 CIDR blocks.
- Add-on Configuration: The device supports add-on hardware cards for additional network interfaces. These add-ons are configured within the Cato Management Application, and a mismatch between configured and actual hardware results in the add-on interface being treated as physically disconnected.
- Connectivity to Cato Cloud: The Socket connects to the Cato Cloud via ISP connections. It supports direct Ethernet connections from ISP routers to WAN ports.
- Static IP Assignment (WAN): Users can assign a static IP address to the WAN interface if required by their ISP, configurable through the Socket's WebUI (https://[your Cato Socket's IP address] or https://169.254.100.1 for initial setup).
- PPPoE Connection: The Socket supports PPPoE connections for WAN interfaces, allowing users to enter PPP account details (username, password) provided by their ISP.
- Cellular Modem Connectivity: The Socket can connect to a cellular modem for Internet connectivity, requiring proper SIM card installation and verification of cellular signal strength.
- Firmware Management: The Socket automatically checks for and performs firmware upgrades upon connecting to the Cato Cloud.
- Socket Assignment to Site: Once operational and connected to the Cato Cloud, the Socket can be activated and assigned to a specific site within the Cato Management Application, appearing as "connected" in the Monitoring > Topology screen.
- Rack Mounting: Both X1700 and X1700B models support rack mounting using the King Slide AA612 Rack-Mounting Kit. The kit includes inner and outer rails, brackets, and screws for secure installation in a rack.
Maintenance Features:
- Administrator Account Onboarding: New administrators onboard to the Cato Management Application via an invitation email, setting up their password for administrative access.
- Password Reset: For the X1700B, the reset button can be used to reset the Socket WebUI password (press for 5-15 seconds) or restore factory default settings (press for 25-35 seconds).
- Network Card Add-On Installation: Add-ons can be installed by shutting down the Socket, removing power cables, locating the expansion slot, loosening thumb screws, inserting the card, tightening screws, and reconnecting power.
- Troubleshooting: The COM port on the X1700B is a console port used by Support for troubleshooting. Network port LEDs provide visual cues for activity and link speed, aiding in basic network diagnostics.
- Reimaging: USB ports (USB2 on X1700, USB 2.0 or 1.0 on X1700B) can be used with flash drives to reimage the Socket.
- Rack Removal: The rack-mounting kit facilitates removal of the chassis from the rack by loosening shipping screws and pressing disconnect tabs.
Prerequisites for Deployment:
- A Cato Socket (shipped to the user).
- An ISP connection for Cato Cloud connectivity.
- A WAN IP address (DHCP or static).
- A Native Range for the LAN directed towards the Socket.
- Optional DHCP Range(s) supported by the Socket.
- The network's gateway IP address.
- Open ports and protocols: UDP 53, UDP 52 (optional), UDP 443, TCP 443.
The device is designed for ease of deployment and integration into existing network infrastructures, providing robust security and SD-WAN capabilities through the Cato Cloud.