Version 5.2 Sourcefire 3D System Installation Guide 90
Setting Up a Sourcefire 3D System Appliance
Configuring Network Settings Using a Script
Chapter 4
Management (LOM) connection. You can also browse to the device’s web
interface from a computer on your management network.
Configuring Network Settings Using a Script
SUPPORTED DEVICES: Series 2
After you install a new Defense Center or Series 2 device, or delete its network
settings as part of a reimage, you must configure the appliance to communicate
on your management network. Complete this step by running a script at the
console.
The Sourcefire 3D System provides a dual stack implementation for both IPv4 and
IPv6 management environments. First, the script prompts you to configure (or
disable) IPv4 management settings, then IPv6. For IPv6 deployments, you can
retrieve settings from a local router. You must provide the IPv4 or IPv6
management IP address, netmask or prefix length, and default gateway.
When following the script’s prompts, for multiple-choice questions, your options
are listed in parentheses, such as
(y/n). Defaults are listed in square brackets,
such as
[y]. Press Enter to confirm a choice.
Note that the script prompts you for much of the same setup information that the
appliance’s setup web page does. For more information, see
Network Settings on
page 96 (device) and Network Settings on page 103 (Defense Center).
To configure network settings using a script:
A
CCESS: Admin
1. At the console, log into the appliance.
Use
admin as the username and Sourcefire as the password.
2. At the admin prompt, switch to the root user by typing
sudo su -, then
typing the password again if prompted.
3. At the root prompt, run the following script:
/usr/local/sf/bin/configure-network
4. Follow the script’s prompts.
Configure (or disable) IPv4 management settings first, then IPv6. If you
manually specify network settings, you must:
• enter IPv4 addresses, including the netmask, in dotted decimal form.
For example, you could specify a netmask of 255.255.0.0.
• enter IPv6 addresses in colon-separated hexadecimal form. For an IPv6
prefix, specify the number of bits; for example, a prefix length of 112.
5. Confirm that your settings are correct.
If you entered settings incorrectly, type
n at the prompt and press Enter. You
can then enter the correct information. The console may display messages as
your settings are implemented.
To Next Page
Loading...