AirTight SA-250 User manual

Installation Guide
SA-250 Server
339 N. Bernardo Avenue, # 200, Mountain View, CA 94043
www.airtightnetworks.com
©2003-2015 AirTight Networks, Inc. All rights reserved.

This page is intentionally left blank.

SA
-250 Server Installation Guide 1
END USER LICENSE AGREEMENT
Please read the End User License Agreement before installing the SA-250 server. The End User License
Agreement is available at the following location -.http://www.airtightnetworks.com/fileadmin/pdf/AirTight-EULA.pdf.
Installing the SA-250 server constitutes your acceptance of the terms and conditions of the End User License
Agreement.
DISCLAIMER
THE INFORMATION IN THIS GUIDE IS SUBJECT TO CHANGE WITHOUTANY PRIOR NOTICE.
AIRTIGHT®NETWORKS, INC. IS NOT LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT, OR
CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS
OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, OR ANY OTHER
PECUNIARY LOSS) ARISING OUT OF THE USE OF OR INABILITY TO USE THIS PRODUCT.
THIS PRODUCT HAS THE CAPABILITY TO BLOCK WIRELESS TRANSMISSIONS FOR THE PURPOSE OF
PROTECTING YOUR NETWORK FROM MALICIOUS WIRELESS ACTIVITY. BASED ON THE POLICY
SETTINGS, YOU HAVE THE ABILITY TO SELECT WHICH WIRELESS TRANSMISSIONS ARE BLOCKED AND,
THEREFORE, THE CAPABILITY TO BLOCK AN EXTERNAL WIRELESS TRANSMISSION. IF IMPROPERLY
USED, YOUR USAGE OF THIS PRODUCT MAY VIOLATE US FCC PART 15 AND OTHER LAWS. BUYER
ACKNOWLEDGES THE LEGAL RESTRICTIONS ON USAGE AND UNDERSTANDS AND WILL COMPLY WITH
US FCC RESTRICTIONS AS WELLAS OTHER GOVERNMENT REGULATIONS. AIRTIGHT IS NOT
RESPONSIBLE FOR ANY WIRELESS INTERFERENCE CAUSED BY YOUR USE OF THE PRODUCT.
AIRTIGHT NETWORKS, INC. AND ITS AUTHORIZED RESELLERS OR DISTRIBUTORS WILLASSUME NO
LIABILITY FOR ANY DAMAGE OR VIOLATION OF GOVERNMENT REGULATIONS ARISING FROM YOUR
USAGE OF THE PRODUCT, EXCEPT AS EXPRESSLY DEFINED IN THE INDEMNITY SECTION OF THIS
DOCUMENT.
LIMITATION OF LIABILITY
AirTight Networks will not be liable to customer or any other party for any indirect, incidental, special,
consequential, exemplary, or reliance damages arising out of or related to the use of AirTight Wi-Fi, AirTight
WIPS,AirTight Cloud Services, and AirTight devices under any legal theory, including but not limited to lost profits,
lost data, or business interruption, even if AirTight Networks knows of or should have known of the possibility of
such damages. Regardless of the cause of action or the form of action, the total cumulative liability of AirTight
Networks for actual damages arising out of or related to the use of AirTight Wi-Fi, AirTight WIPS, AirTight Cloud
Services or AirTight devices will not exceed the respective price paid for AirTight Wi-Fi, AirTight WIPS, AirTight
Cloud Services, or AirTight devices.
Copyright © 2003–2015 AirTight®Networks, Inc. All Rights Reserved.
Powered by Marker PacketTM, Active ClassificationTM, Live EventsTM, VLAN Policy MappingTM, Smart ForensicsTM,
WEPGuardTM and WPAGuardTM. AirTight Networks and the AirTight Networks logo are trademarks and AirTight is
a registered trademark of AirTight Networks, Inc.
This product contains components from Open Source software. These components are governed by the terms
and conditions of the GNU Public License. To read these terms and conditions visit
http://www.gnu.org/copyleft/gpl.html.
Protected by one or more of U.S. patent Nos. 7,002,943; 7,154,874; 7,216,365; 7,333,800; 7,333,481; 7,339,914;
7,406,320; 7,440,434; 7,447,184; 7,496,094; 7,536,723; 7,558,253; 7,710,933; 7,751,393; 7,764,648; 7,804,808;
7,856,209; 7,856,656; 7,970,894; 7,971,253; 8,032,939; and international patents: AU 200429804; GB 2410154;
JP 4639195; DE 60 2004 038 621.9; and GB/NL/FR/SE 1976227. More patents pending. For more information on
patents, please visit: www.airtightnetworks.com/patents.

SA
-250 Server Installation Guide 2
1. About this Guide
The SA-250 Server Installation Guide gives an overview of the power connector and the ports on the SA-250
server and explains how to configure it.
Important! Please read the EULA before installing the SA-250 server. Installing the server constitutes your
acceptance of the terms and conditions of the EULA mentioned above in this document.
Intended Audience
This guide is intended for anyone who wants to install and configure the SA-250 server.
Document Overview
This guide contains the following chapters:
1. Package Contents: Lists the components included in the system package.
2. SA-250 Server Overview: Provides an overview of the SA-250 server.
3. Installing the SA-250 Server: Describes how to power on the server, connect the server to the network
and your computer, and configure the server.
4. Server Config Shell Commands: Lists a pre-defined set of commands that allow you to configure and
view the status of the Server.
5. Set Up and Manage Server Cluster: Describes how to set up and manage a server cluster.
6. Troubleshooting: Provides troubleshooting tips while installing the server and sensor.
7. Backup and Restore Database: Provides instructions to backup and restore database.
Product and Documentation Updates
To receive important news on product updates, please visit our website at http://www.airtightnetworks.com.
We continuously enhance our product documentation based on customer feedback. To obtain a latest copy of this
document, visit http://www.airtightnetworks.com/home/support.html.
Contact Information
AirTight® Networks, Inc.
339 N, Bernardo Avenue, Suite #200,
Mountain View, CA 94043
Tel: [phone]
Fax: [phone]
For technical support, send an email to [e-mail].

SA
-250 Server Installation Guide 3
2. Package Contents
This chapter lists the components included in the SA-250 server package.
Please ensure that the following items are included in the server package:
•Server with software
•System documentation CD-ROM containing:
oUsers Guide
oInstallation Guide
oQuick Setup Guide
oRelease Notes
oUpgrade Instructions
oHigh Availability Configuration
oNetwork Detector Configuration
•Power cord
•Network interface (Ethernet) cable
•Serial cable
•Rack mounting accessories
Figure 2-2-1 SA-250 Server Package Contents
If the package is not complete, please contact AirTight® Networks, Inc. Technical Support at
[e-mail], or return the package to the vendor or dealer where you purchased the product.

SA
-250 Server Installation Guide 4
3. SA-250 Server Overview
This chapter provides an overview of the SA-250 server and describes in detail about the following:
•Front panel of the SA-250 server
•Rear panel of the SA-250 server
The front panel of SA-250 server has a power switch, power LED, HDD activity LED, network interface LED, high
availability interface LED, and temperature LED.
Figure 3-1: Front Panel of SA-250 Server
The following table details the behavior of the power switch.
Table 3-1: SA-250 Server Power Switch Behavior
Action
System Behavior
Recommended User Action
Push the power
switch for 2 seconds.
Graceful shutdown of the server
(similar to restarting the server).
No action is required as the server restarts
automatically.
Push the power
switch for more than
4 seconds.
Hard shutdown of the server
(similar to disconnecting the
power cable).
Press the power switch again to power on the
server. Do not press the power switch for a long
time, as this may cause damage to the hard disk
and thereby cause severe data loss.
The following table provides information about what the LED lights on the server indicate.

SA
-250 Server Installation Guide 5
Table 3-2: SA-250 Server LED Details
LED
LED Color
Meaning of LED
Power
Solid Green
The server is powered on and working normally.
Off
The server is not powered on or not receiving power.
Hard Disk
Blinking Green
The hard disk drive is being accessed.
Off
The hard disk drive is not being accessed.
Network Interface
Blinking Green
The server is connected to the network.
Off
The server is not connected to the network.
High Availability
Interface
Blinking Green
The HA interface Ethernet link is up.
Off
The HA interface Ethernet link is down.
The rear panel of the SA-250 server has a power connector to provide power supply to the server and ports to
connect the server to the network and a computer.
Figure 3-2: Rear Panel Ports of SA-250 Server
The rear panel of SA-250 Server has a serial port (RS 232 F-F), a network interface port (RJ-45 10/100/1000
Ethernet), a high availability (HA) port (RJ-45 10/100/1000 Ethernet), and a power connector. Use the power
connector to power the server using 110-240V 50/60 Hz AC input. Connect the power connectors to two different
power sources to optimize the redundancy. The following table describes the serial, network interface, and high
availability ports.
Table 3-3: SA-250 Server Rear Panel Ports
Port Description Connector
Type Settings/Protocol
Serial
Enables a serial (RS-232)
connection to establish terminal
sessions using terminal emulation
programs such as HyperTerminal for
Windows or minicom for Linux
DB-9
Settings:
Bits per second: 9600
Data Bits: 8
Parity: None
Stop Bits: 1
Flow Control: None
Protocol: RS-232

SA
-250 Server Installation Guide 6
Port Description Connector
Type Settings/Protocol
Network Interface Used to connect the server to the
enterprise network RJ-45
Settings: 10/100/1000
Mbps
Protocol: Ethernet
High Availability
Used to connect the server to the
other servers in a high availability
cluster
RJ-45
Settings: 10/100/1000
Mbps
Protocol: Ethernet

SA
-250 Server Installation Guide 7
4. Installing the SA-250 Server
You must set up the server before using it to monitor and protect your network. This chapter explains how to
connect and configure the SA-250 server.
Connecting the SA-250 Server
Connecting the server involves mounting the server appliance, powering on the server, and connecting it to the
network.
Mount the Server Appliance
Place the server on the rack and mount it using the rack mounting accessories.
Figure 4-1: Mount SA-250 Server

SA
-250 Server Installation Guide 8
Power on the Server
The server appliance runs at 110-240V, 3-5A, 50-60 Hz AC power. AirTight® Networks recommends that you
provide surge-free stable power to the server.
Figure 4-2: SA-250 Server Power Cable
To power on the server, perform the following steps:
1. Connect one end of the power cable to the power socket on the rear panel of the server.
2. Connect the other end of the power cable to a 110-240V, 50/60 Hz AC power source.
3. Press the Power switch on the front panel of the server.
Note: On connecting the power cable and pressing the power switch, the power LED should turn solid green.
Connect the SA-250 Server to Enterprise Network
After connecting the power cables, you must connect the server to your enterprise network. Connect the network
interface port on the server to the desired subnet using the Ethernet cable provided to you as shown in the figure.
Warning! Do NOT connect the high availability (HA) port to the subnet.
Figure 4-3: SA-250 Server Ethernet Connection
Note: The default IP address of the server is 192.168.1.246. Ensure that no other device on your network uses
the same IP address as the server.

SA
-250 Server Installation Guide 9
Accessing the Server
You can access the server in following ways:
•Using an SSH Secure Shell (SSH) client to access the server (Recommended)
•Using a serial RS-232 cable
Accessing the Server using SSH (Recommended)
To access the server using SSH, perform the following steps:
1. Connect your computer to the same subnet where the server is connected.
2. Change the IP address of your computer to 192.168.1.XXX. For example, 192.168.1.244.
3. Open SSH on your computer and press Enter or Space on the SSH Secure Shell dialog.
4. Access the default server IP address, 192.168.1.246, as shown in the following figure:
Figure 4-4: Access Default Server IP Address
5. Login using the username: config and password: config.
Note: The default IP address of the server is 192.168.1.246.

SA
-250 Server Installation Guide 10
Accessing the Server using a Serial Cable
You can also access the server using a serial RS-232 cable as shown in the following figure and then follow the
steps listed below the figure.
Figure 4-5: Accessing Server using Serial RS-232 Cable
1. Launch the HyperTerminal from Start > All Programs > Accessories > HyperTerminal on your system.
Figure 4-6 HyperTerminal

SA
-250 Server Installation Guide 11
2. Define a new HyperTerminal connection in the Connection Description dialog.
a. Enter a name for the HyperTerminal connection in the Name field.
b. Select an icon to identify the new connection.
c. Click OK.
Figure 4-7: Connection Description
3. Specify the HyperTerminal connection details by selecting or entering the appropriate connection
information and click OK.
Figure 4-8: HyperTerminal Connection

SA
-250 Server Installation Guide 12
4. Edit the serial port settings to ensure proper communication between the server and your computer, and
click OK. Alternately, click Restore Defaults to use the default settings.
•Bits per second: 9600
•Data bits: 8
•Parity: None
•Stop bits: 1
•Flow control: None
Figure 4-9: HyperTerminal Connection
5. Press Enter or Space on the HyperTerminal screen.
The login prompt appears. Log in using the username: config and password: config.
Accessing the Server Initialization and Setup Wizard
At the first boot of the server, the Server Initialization and Setup Wizard is displayed. This wizard helps you to
map the Backspace key, change the configuration password, change the network settings, and set the server ID
of the server. You can retain the default values at each step by pressing Enter.
The wizard is displayed at the first boot or at every reboot if the server is not configured.
Important: If you are configuring the server for HA mode, you can skip the Server Initialization and Setup
wizard and go to the config prompt. Change the config shell password, set the time zone and date and time,
set the Server ID, and then use the set ha command to configure the server in HA mode.

SA
-250 Server Installation Guide 13
Configure the Backspace Key
Before configuring the network settings, you are prompted to map the Backspace key to work properly.
Figure 4-10: Configure the Backspace Key
The Server Initialization and Setup Wizard appears as shown in the following figure.
Figure 4-11: Server Initialization and Setup Wizard

SA
-250 Server Installation Guide 14
Change Config Shell Password
As a best practice, AirTight Networks recommends that you change the config shell password. The following
figure shows how to change the config shell password.
Figure 4-12: Change Config Shell Password
Change Network Settings
The network settings of the server specify its unique IP address on the network. Sensors and access points (APs)
use this IP address to identify the server. The default IP address assigned to the server is 192.168.1.246.
Important: Note down the network settings. If you forget the network settings, you can no longer access the
server over the network after it reboots. Use the serial cable to access the server and change its network settings.
To change the network settings, provide the following input.
•IP Address: Choose an IP address that is compatible with the network segment on which the server is
connected. The server must belong to the same subnet.
•Subnet Mask: Enter the mask of the network segment to which the server is connected.
•Gateway IP Address: Enter the IP address of the gateway, for the subnet on which the server is
connected. Ethernet traffic from the subnet is forwarded to another network through the gateway.
•Primary DNS IP Address: Specify the IP address of the primary DNS server used by the enterprise
server to resolve DNS entries.
•Secondary DNS IP Address: Specify the IP address of the secondary (alternate) DNS server used by
the enterprise server to resolve DNS entries.
•Tertiary DNS IP Address: Specify the IP address of the tertiary (alternate) DNS server used by the
enterprise server to resolve DNS entries.
•DNS Suffix: Append this suffix to the unqualified domain name to generate a fully qualified domain name.
The following figures show how to change the network settings.

SA
-250 Server Installation Guide 15
Figure 4-13: Configure Network Settings
Figure 4-14: Confirm Network Settings
Figure 4-15: Enable IPv6 Support

SA
-250 Server Installation Guide 16
Set Server Time Zone, Date and Time Settings
Set the correct time zone and date for the server. You must select a continent and then a country to set the time
zone. You can change the server date and time manually or using an NTP server. To set the server date and time
using an NTP server, you must specify the NTP server IP address or the DNS name of the NTP server.
Figure 4-16: Set Server Time Zone, Date and Time

SA
-250 Server Installation Guide 17
Set Server ID Settings
The server ID identifies a unique server instance when there are multiple server instances on the network.
Sensors and APs can be configured to communicate with a specific server instance. The default server ID is 1.
Recommended: Server ID setting is important only if you have a multi-server installation. If you have only one
server, the server ID should be the default value 1.
Figure 4-17: Set Server ID
Set Server Tag
An AirTight server can be assigned a tag that could be used to identify the server and specific files and objects
associated with that server. By default, the server tag is blank.
Figure 4-18: Set Server Tag
You can reset the server tag using the set server tag command. For details, refer to the Server Tagging
chapter in this guide.

SA
-250 Server Installation Guide 18
The server initialization completion message screen appears as shown in the following figure.
Figure 4-19: Server Initialization Completion Message
Press yto reboot the server for the changes to take effect. If you choose to reboot later press n. The server
Config Shell prompt appears. You must reboot the server on completion of the Initialization and Setup Wizard
before you access the server from the AirTight Management Console (“GUI”).
Note: On the Config Shell prompt, you can type the help command to view the list of available commands.