Symantec PacketShaper PS-S200 User manual

Page 1
01 Unpack the Appliance
Verify the contents of the shipping package for PacketShaper appliance, which should include:
PS-S200 PS-S400 PS-S500
AC power cords (number included) 122
Grounding hardware √
Null-modem serial cable √ √ √
Two/four post slide-rail kit Optional √ √
Rack-mount ears √ √
Safety and Regulatory Compliance Guide √ √ √
Quick Start Guide (this document) √ √ √
Software License Agreement √ √ √
Hardware Warranty √ √ √
02 Connect Cables
Symantec recommends plugging in cables, verifying LEDs, and configuring and licensing
the appliance before rack-mounting. If you would rather rack-mount the appliance before
performing configuration tasks, skip to Step 7—Rack-Mount the Appliance.
The following illustration and procedure describe a typical deployment for PS-S200, PS-S400,
and PS-S500 appliances.
Note: Network cables are not included with the appliance. Make sure to use only straight-
through Ethernet cables. For 1000Base-T operation, Symantec recommends Category 5E cables
or better (Category 6 or 6A) for distances of 330 feet (100 meters).
To deploy the appliance and connect its cables:
a. Disconnect the Ethernet cable (if there is one) between the LAN switch and WAN router.
b. Connect the appliance to the LAN switch with a network cable:
oFor PS-S200 and PS-S400 appliances, connect the 2:0 port to the LAN switch.
oFor PS-S500 appliances, connect the 1:0 port to the LAN switch.
oThe appliance auto-negotiates 10/100/1000 Base-T speed and duplex settings.
c. Connect the appliance to the WAN router with a network cable:
oFor PS-S200 and PS-S400 appliances, connect the 2:1 port to the WAN router.
oFor PS-S500 appliances, connect the 1:1 port to the WAN router.
d. Connect the appliance’s SYS MGMT 0:0 port to the management network switch with a
network cable.
Note: The appliance must be managed through the SYS MGMT 0:0 port.
e. Connect the appliance’s DB9 serial port to a serial terminal or workstation with terminal
emulation software. Use the included null-modem cable. The serial connection is used to
perform the appliance’s initial configuration.
f. For PS-S500 appliances, attach the lug-
equipped end of the included grounding
wire (10 AWG) to both grounding studs
on the appliance, securing it with the star
washers and M5 nuts. Attach the other
end of the grounding wire to a proper
earth-ground.
g. Connect the included AC power cord to the appliance’s power inlet on the rear panel.
Connect the other end of the power cord to a power source. If the appliance has a second
(redundant) power supply, connect it as well.
03 Power on the Appliance and Verify LEDs
To verify the appliance is operational:
a. Confirm the appliance’s power cords are securely connected to a power source.
b. If the appliance does not automatically power on, press the rear soft power switch.
Note: The state of the appliance’s soft power switch (on or off) is retained when power is
removed. This may necessitate pressing the power switch when reapplying power to the
appliance.
c. As the appliance boots, verify the following:
oThe Power LED turns amber.
oNear the end of the boot cycle, the Power LED alternates between amber and green,
indicating an unconfigured state.
oFollowing the initial configuration (see Step4), the Power LED turns green. In addition, the
LCD displays system statistics, which can be scrolled through with the Left/Right Arrows.
The front-panel LEDs indicate the following states::
oPower LED (•) Off: Powered off
(•) Amber: Booting
(•) Amber/green alternating: Unconfigured
(•) Green: Powered on and configured
oSys Status LED (•) Off: No status
(•) Green: Healthy
(•) Amber: Warning
(*) Amber blinking: Critical (or not licensed)
04 Perform the Initial Configuration
You must have the following network information to initialize the appliance:
oAppliance IP address oSubnet mask
oPrimary DNS server IP address oLink settings (speed and duplex)
oDefault Gateway IP address
To perform the initial configuration for the appliance:
a. Confirm the appliance’s DB9 serial port is connected to a serial terminal or workstation with
terminal emulation software.
b. Open a terminal emulation program such as Microsoft HyperTerminal®, PuTTY, Tera Term, or
ProComm™.
c. Configure the terminal emulation software to the following settings:
oBaud rate: 9600 bps oData bits: 1
oParity: none oStops bits: 8
oFlow control: none
d. Power on the appliance (if it is not already powered on).
e. When prompted, enter the default User Name [touch] and Password [touch] and click Login.
f. Follow the on-screen instructions and enter the necessary parameters. When prompted,
commit the changes. The configuration is saved to the appliance.
Note: After the appliance’s IP address has been configured, you can also log in to CLI via remote
login with SSH, or you can use a browser by appending /cli.htm to the appliance’s IP address.
For more information, see the PacketGuide at: http://www.symantec.com/docs/DOC9776
Note: Following the initial configuration, the System Status LED blinks amber, indicating the
appliance has not yet been licensed (see Step5).
05 License the Appliance
After the appliance is configured for network access, the appliance must be licensed for
full software functionality. If the appliance is connected to the Internet, the license will
automatically sync to the appliance within 24 hours.
You can also retrieve the license immediately with the license update command in CLI
(Internet connectivity required).
If the appliance is not connected to the Internet or if the license retrieval does not work, you
can manually install the license by downloading the license file and copying it to a web server
or to the appliance’s internal storage device, after which the license load command can be
invoked from the CLI.
To retrieve the license (Internet connectivity required):
a. Log in to the PacketShaper CLI (see Step 4).
b. To see if the license is installed, enter: version verbose
If the license has not been installed, you will encounter an Invalid License message.
c. To download and update the license, enter: license update
d. To reboot the appliance, enter: reset
Note: Rebooting the appliance may take some time, depending on the network environment.
DO NOT unplug the power cables during the reboot process as this can corrupt the
configuration.
e. After rebooting, to verify the license key attributes and expiration dates, enter:
version verbose
To manually install the license file:
a. Download the license file:
oGo to https://support.symantec.com/ and log in with MySymantec credentials.
oChoose Licensing > Network Protection (Blue Coat) Licensing.
oOn the Network Protection Licensing Portal, on the left side, select PacketShaper
SSeries and click License Download.
oWhen prompted, enter the appliance’s serial number and click Submit.
oAfter the license has been generated, click Download License File.
b. Upload the license file to the appliance:
oOpen a browser and enter the appliance’s IP address (for example, an IP address of
192.168.2.42 translates to a URL of https://192.168.2.42).
oWhen prompted, enter the default User Name [touch] and Password [touch].
oClick Login.
oClick Advanced UI and then File Browser.
oUpload the license key file to a folder on the appliance (such as 9.256/).
c. To activate the license, from the CLI prompt, enter:
license load le://localhost/<le path> | http://<url>
where <file path> is the name and location of the license key file on the PacketShaper and
<url> is the URL of the file on a web server, for example:
• license load le://localhost/9.256/license.bcl
• license load http://mywebserver.com/licenses/license.bcl
Note: Filenames are case sensitive. Make sure to enter the license key filename with the
same upper and lower case characters entered when the file was saved.
d. To reboot the appliance, enter: reset
Note: Rebooting the appliance may take some time, depending on the network environment.
DO NOT unplug the power cables during the reboot process as this can corrupt the
configuration.
e. To verify the license key attributes and expiration dates, enter: version verbose
Quick Start Guide
PacketShaper PS-S200, PS-S400, PS-S500
RouterSwitch
Main Site
LAN
Branch 1
LAN
Branch 2
LAN
PacketShaper Appliance

Copyright © 2017 Symantec Corp. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Blue Coat, and the Blue Coat logo are trademarks or registered trademarks of Symantec Corp. or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this
document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. Part Number: 231-03313 Rev A.0
THE DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR
CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. SYMANTEC CORPORATION PRODUCTS, TECHNICAL SERVICES, AND ANY OTHER TECHNICAL DATA REFERENCED IN THIS DOCUMENT ARE SUBJECT TO U.S. EXPORT CONTROL AND SANCTIONS LAWS, REGULATIONS AND
REQUIREMENTS, AND MAY BE SUBJECT TO EXPORT OR IMPORT REGULATIONS IN OTHER COUNTRIES. YOU AGREE TO COMPLY STRICTLY WITH THESE LAWS, REGULATIONS AND REQUIREMENTS, AND ACKNOWLEDGE THAT YOU HAVE THE RESPONSIBILITY TO OBTAIN ANY LICENSES, PERMITS OR OTHER APPROVALS THAT MAY BE REQUIRED IN ORDER TO EXPORT, RE-EXPORT, TRANSFER IN COUNTRY OR IMPORT AFTER DELIVERY TO YOU.
Page 2
PS-S200, PS-S400, PS-S500 Quick Start Guide
06 Perform a Graceful Shutdown
Before proceeding to rack-mounting the appliance, log in to the PacketShaper CLI and perform
a graceful shutdown of the appliance.
To perform a graceful shutdown:
a. Log in to the PacketShaper CLI (see Step 4).
b. Enter: shutdown
Warning: Do not power off the appliance with the soft power switch or by removing the power
cables! Abruptly removing power can result in irreparable data loss. Always use the shutdown
command from the CLI to power off the appliance.
07 Rack-Mount the Appliance
The slide-rail mounting kit included with the PS-S400 and PS-S500 appliances (available as an
option for PS-S200 appliances) allows the appliance to be rack-mounted in a two- or -four-post
equipment rack. The slide-rail kit includes the following parts:
Note: To rack-mount the appliance, you may need an M4 nut driver or adjustable wrench, #2
Phillips head screwdriver, and rack screws.
Note: The following procedure documents how to install the appliance in a four-post equipment
rack. For comprehensive information on rack-mounting the appliance, including other
configurations, see the S-Series Maintenance and Upgrade Guide at:
http://www.symantec.com/docs/DOC9795
To install the appliance in a four-post equipment rack:
a. Disassemble the two slide-rail assemblies:
oFully extend each slide-rail by sliding out the inner rails until they reach the stop.
oRelease the white slide latches (toward the rear of the inner rails) and slide the inner rails
all the way out.
oSlide-rails are symmetrical and can be used with either side of the chassis.
b. Attach the two inner rails to the appliance:
oAlign each inner rail to the mounting posts on each side of the chassis. Slide the rail
toward either the front (PS-S200 and PS-S400) or rear (PS-S500) of the chassis until
each of the mounting posts snap into place.
oSecure the inner rails to the appliance with M3 screws:
• For PS-S200 and PS-S400 appliances, use one M3 screw in the center of each rail.
• For PS-S500 appliances, use two M3 screws in each rail.
c. For PS-S200 and PS-S400 appliances, install the two rack ears. Align them with the mounting
posts on the chassis sides near the front of the appliance and secure them with the included
fasteners.
d. Assemble the two slide-rails and install them in the rack:
oLoosely attach Rail_C to Rail_A. Secure the rails with three M3 screws inserted through
the slot in Rail_C and screwed into three holes in Rail_A. Make sure the screws are
equidistant from each other so the load will be evenly distributed on the rail. Do not yet
fully tighten the screws.
Note: The precise attachment location of the screws will depend on how far Rail_C will
extend or retract to fit the rack. It may be necessary to remove Rail_C from Rail_A to
determine the proper installation length.
oInstall the assembled slide-rails in the rack:
• Secure the front bracket for Rail_A to the outside front of the rack using two rack
screws. Do not yet fully tighten the screws. You will do so after the appliance is
installed in the rack.
• Extend or retract Rail_C to align the rear bracket with the outside rear of the rack.
Secure the bracket with two M3 screws. Do not yet fully tighten the screws. You will
do so after the appliance is installed in the rack.
• Tighten the side-mounting screws for Rail_C.
• Verify the slide-rail assemblies are installed at the same rack eight.
e. Install the appliance in the rack:
oAlign the inner rails attached to the appliance with the slide-rails in the rack and slide the
appliance half-way into the track.
oPress the gray locking tabs on the inner rails to slide the appliance all the way into the rack.
oSlide the appliance out of the rack, far enough to access the rack screws. Fully tighten
the rack screws for the front and rear brackets to secure the slide-rails to the rack.
oGently push the appliance all the way to the back of the rack and tighten the
thumbscrews on the retaining ears to prevent the appliance from sliding out.
f. Reconnect the cables as documented in Step 2—Connect Cables and verify the appliance is
functioning as in Step 3—Power On the Appliance and Verify LEDs.
Technical Support
oContact Information
https://support.symantec.com/en_US/contact-support.html
oMySymantec
https://www.mysymantec.com
Documentation
PacketShaper Software Documentation
ohttp://www.symantec.com/docs/DOC9776
Appliance Documentation
oS-Series Maintenance and Upgrade Guide
http://www.symantec.com/docs/DOC9795
oS200 Series Safety and Regulatory Compliance Guide
http://www.symantec.com/docs/DOC10311
oS400 Series Safety and Regulatory Compliance Guide
http://www.symantec.com/docs/DOC9996
oS500 Series Safety and Regulatory Compliance Guide
http://www.symantec.com/docs/DOC10248
CAUTION:
Before rack-mounting the appliance:
oPower off the appliance and disconnect all cables.
oVerify that the weight of the system does not exceed the rack’s
fully populated weight limit. For more information, refer to the
manufacturer’s instructions included with the rack.
oFor weight stability, load the rack from thebottomup.
oRead the “Rack Mount Warnings” section of the Safety and
Regulatory Compliance Guide.
oTake adequate safety and grounding measures to avoid creating an
electrical shock hazard and to prevent bodily injury.
Rail_C
Rail_A
Inner Rail (2)
Rail_A (2)
Rail_C (2)
Rail_B (2) (used only for 2-post racks)
M3 T-Type Screw (10)
M6 Screw (8)
M6 Cage Nut (8)
(optional)
Rail_C
Locking tab