Version 5.2 Sourcefire 3D System Installation Guide 36
Understanding Deployment
Deployment Options
Chapter 2
confirm that you are installing your device with the correct cabling is to begin by
connecting the device to its two endpoints using one crossover cable and one
straight-through cable, but with the device powered down. Ensure that the two
endpoints can communicate. If they cannot communicate, then one of the cables
is the incorrect type. Switch one (and only one) of the cables to the other type,
either straight-through or crossover.
After the two endpoints can successfully communicate with the inline device
powered down, power up the device. The Auto-MDI-X feature ensures that the
two endpoints will continue to communicate. Note that if you have to replace an
inline device, you should repeat the process of ensuring that the endpoints can
communicate with the new device powered down to protect against the case
where the original device and its replacement have different bypass
characteristics.
The Auto-MDI-X setting functions correctly only if you allow the network
interfaces to auto-negotiate. If your network environment requires that you turn
off the Auto Negotiate option on the Network Interface page, then you must
specify the correct MDI/MDIX option for your inline network interfaces. See
Configuring Inline Interfaces in the Sourcefire 3D System User Guide for more
information.
Special Cases
Connecting 8000 Series Devices
8000 Series managed devices do not support half duplex network links; they also
do not support differences in speed or duplex configurations at opposite ends of a
connection. To ensure a stable network link, you must either auto-negotiate on
both sides of the connection, or set both sides to the same static speed.
Changing Your Remote Console
When you change your remote console from Physical Serial Port to Lights-Out
Management or from Lights-Out Management to Physical Serial Port on 70xx
Family devices, you may have to reboot the appliance twice to see the expected
LILO boot prompt.
TIP! 3D2100/2500/3500/4500 devices do not have functional serial ports.
Deployment Options
When you place your managed device on a network segment, you can monitor
traffic using an intrusion detection system or protect your network from threats
using an intrusion prevention system.
To Next Page
Loading...