AX-Training-2.7v2.0-S_02-AX_Management

1AXManagementSection22SectionobjectivesExploreAXmanagementaccessUnderstandAXconfigurationcomponentsBackup/restoreAXconfigurationReviewinitialAXconfiguration3AXmanagementaccessCLIConsole(RS-232connection/9600,8,N,1)Telnet(disabledbydefault)SSHv2WebHTTP(configurableports-disabledbydefault)HTTPS(configurableports)LevelsofCLIauthenticationCLI:LoginID/PasswordandEnableID/PasswordWeb:Adminroles(read-write/read-only)4AXconfigurationcomponentsAXconfigurationcomponentsConfigurationfile(optional)aFleXfiles(optional)PBSLBfiles(optional)SSLcertificatesandkeys(optional)Geo-locationfiles(optioninGSLBandgeo-location-basedVIPaccess)5NamedconfigurationprofilesBenefitsofnamedprofilesMaintainmultipleconfigurationsLinkstartupconfigurationperpartitiontoanamedprofileCopyandeditprofileswithoutdisruptingnormaloperationsMaintainsingleconfigurationforbothphysicalpartitionsCreatenewprofileAX#writememorynew_profileAX(config)#copyexisting_profilenew_profileSeeallprofilesAX#showstartup-configallLinkstartupconfigtoprofileAX(config)#linkstartup-configprofile_name[primary|secondary]6AXconfigurationfullbackupandrestoreAXfullconfigurationbackupWebUI:ConfigSystemMaintenanceBackupSystemCLI:AX(config)#backupsystem[…]AXfullconfigurationrestoreWebUI:ConfigSystemMaintenanceRestoreSystemCLI:AX(config)#restore[…]Note:Supporteduploadprotocols:FTP,SFTP,SCP,RCP,TFTP,andHTTPS(viaWebUI)7AXconfigurationprofilebackupandrestoreAXconfigurationprofilebackupWebUI:ConfigSystemConfigFile[open©]CLI:AX(config)#copylocal_profile[use-mgmt-port]destinationAXconfigurationprofilerestoreWebUI:ConfigSystemConfigFileAdd[paste]CLI:AX(config)#copy[use-mgmt-port]remote_profilelocal_profileNote:Supporteduploadprotocols:FTP,SFTP,SCP,RCP,TFTP,andHTTPS(viaWebUI)8BackingupotherconfigurationelementsAX#export?running-configRunningConfigssl-certSSLCertFilessl-cert-keySSLCert/KeyFilessl-crlSSLCrlFilessl-keySSLKeyFileaflexaFleXScriptSourceFilebw-listBlack/WhiteListFileclass-listClassListFileaxdebugAXDebugPacketFiledebug_monitorDebugMonitorOutputstartup-configStartupConfigsyslogSyslogfilethales-secworldThalessecurityworldfiles-in.tgzformatthales-kmdataThalesKmdatafiles-in.tgzformatdnssec-dnskeyDNSSECDNSKEY(KSK)fileforthezonednssec-dsDNSSECDSfileforthezoneip-map-listIPMapListFile9ErasingconfigurationYoumayeraseconfigurationwhilepreservingaccesstothedeviceAX(config)#erase?preserve-managementPreservemanagementipanddefaultgatewaypreserve-accountsPreserveadminaccountsreloadReloadaftererasecrThiscommandalsoerasesprofilelinkedtocurrentstartupconfig(exceptfor“preserve”elements)butdoesnotaffectotherprofiles.10AXsoftwarelocationAXsoftwareisstoredonTwodiskpartitions:primaryandsecondarySecondpartitionisdesignedforeasysoftwarerollbackTwoCompactFlashpartitions:primaryandsecondaryCFisdesignedforemergencyrecoveryNote:EachstoragelocationhasitsownsoftwareandAXconfiguration11AXsoftwareupgradeoptionsChecktheAXrunningpartitionWebUI:MonitorOverviewSummarySystemInformationCLI:AX#showbootimageUpgradeAXdevice’sotherpartitionWebUI:ConfigurationSystemMaintenanceUpgradeCLI:AX(config)#upgrade[…]CopyrunningconfigurationtotheotherpartitionorlinkexistingprofiletoitAX#writememory[primary|secondary]AX(config)#linkstartup-configprofile_name[primary|secondary]SetbootsourcetotheotherpartitionWebUI:ConfigurationSystemSettingsBootCLI:AX(config)#bootimagehd[primary|secondary]12AXinitialconfigurationRollbacktoFactoryconfigurationCLI:AX(config)#system-resetAX(config)#endAX#rebootFirststepconfigurationConnectontheAXconsole(9600baud-8bits–noparity-1stopbit)Defaultuser/password:admin/a10ConfigurethemanagementinterfaceanditsdefaultgatewayFinishtheAXconfigurationviaCLI(ssh)orWebUI(https)13AXinitialconfigurationexampleAXlogin:adminPassword:AXenPassword:AX#confAX(config)#interfacemanagementAX(config-if:management)#ipaddress172.31.31.11/24AX(config-if:management)#ipdefault-gateway172.31.31.1AX(config-if:management)#exitAX(config)#exit14LabBackupyourAXusingFTPserverandlocaldrive15SectionsummaryInthismodule,wediscussed:AXManagementaccessBackupandrestoreprocedureUpgradeanddowngradeAXLayer2/VLANWehaveperformed:AXconfigurationbackupandrestore16TableofContentsSection0:CourseIntroductionSection1:LoadBalancingConceptsSection2:AXManagementSection3:HTTPSection4:HTTPSSection5:AXAccelerationSection6:AXSecuritySection7:HighAvailabilitySection8:AXTroubleshootingSection9:aFleX