Starting the Management Web Interface

Physically Connecting to the Unit

The first time you connect to the unit before logging in, you must connect the LAN port on the management station to the management on the front of the unit. This allows you to log in and configure the unit for the first time. For example, you can set the unit’s time and date and create other logical interfaces so you can connect through a LAN or WAN .

The default management port for the FSX Performance Element is the Management port.

The default management port is the Management port.

Logging In

Once you have established a physical connection to the equipment, you are ready to log in. There are various ways to log in depending on how the unit has been configured. You would usually connect to the unit for the first time using the Management port. You would then configure another interface, e.g. Network, for in-band management through the network.

When logging in for the first time

1. The unit is pre-confirgured with a default static IP of 192.168.1.254/24, therefore you must assign your workstation or terminal with a static IP address belonging to the same subnet as the unit. For example 192.168.1.2.

2. Start your Web browser and enter the following in the address bar: https://192.168.1.254.
   

   ---

   Note: This is the factory default IP address of the unit. If you are using static IP addresses, you should then modify the unit’s IP address to be unique, thereby avoiding duplicate IP addresses with other factory default units. As an alternative, you can also configure the unit to use DHCP. For more information on modifying IP addresses, using DHCP and other options for logical interfaces, refer to "Configuring Logical Interfaces".

   ---

3. The login page for the unit opens. Log in as admin with the password admin.
   

   ---

   Note: This is the default password for the user "admin", which is a special user account that has been granted full read/write access to all the unit's settings. It is strongly recommended that you change the default admin password after your first log in; doing so ensures that only the admin user can perform admin functions and control access to the unit. To change the password, refer to the section "Changing Passwords".

   ---

When logging in for the first time (if another logical interface is configured)

1. Ensure your management station has a route to the equipment.

2. Launch your Web browser and enter the equipment address in the address bar, e.g. https://192.168.1.25 (or host_name.domain_name if you are using a DNS).

3. The login page opens. Log in using the admin username and account password.

Password Considerations

The Management Web Interface supports a variety of authentication methods, as well as the order in which these methods are applied. You can indicate your preferred authentication order in the System ▶Session ▶Configuration page.

The maximum permitted password length varies, depending on the authentication method you specify:

• Local Authentication: 48 characters
• RADIUS Authentication: 48 characters
• TACACS+ Authentication: 64 characters

If you choose to include a fallback method in your authentication order, you must ensure that the user password you choose is valid for all authentication methods that you want to use. For example, if you want to use TACACS+ authentication when logging in—with local authentication as the fallback method—your TACACS+ password cannot exceed 31 characters.
Any passwords that are longer than 31 characters will be truncated and unusable by the local authentication system, even if they are supported by the TACACS+ server.

If you remove local authentication and the remote system is not working, you will lose access to the unit. To ensure that authentication is working on the remote server, log in then out from the unit, then access the System ▶Agent ▶Syslog page. You should see a syslog message indicating a successful login attempt.

Character Limitations in URLs and User Input Fields

Limitations are in place to prevent use of specific special characters in URLs and user inputs fields throughout the Management Web interface. These limitations are:

• The following special characters are not allowed in any user input fields: "&","<", ">", "\n", "\r", "\t ", "'' and " " ".
• The following special characters are not allowed in the URL input: "<", ">", "\n", "\r" and "\t".

Working in the Home Page

The home page provides general information about the unit. To view the home page, access the page Home.

For information on specific parameters displayed on the home page, refer to the following table.

Home Page Parameters (Home)

Modifying the Host Name

The default host name (or unit identifier) is the serial number assigned to the unit; it is displayed in the banner at the top of the screen after logging in. You can change the host name to a name more meaningful to your organization or use other DHCP host name options. The Host Name identifies the unit on the network and can be used when you log in to the unit, as shown in the figure in the section "About the Management Web Interface".

To modify the Host Name

1. Access the page System ▶Configuration ▶DNS.

2. Enter the new unit identifier in the Host Name field.

3. Click Apply to save your changes.

For information on specific parameters, refer to the following table.

DNS Parameters (System ▶Configuration ▶DNS)

Managing SSL Certificates

The SSL protocol is used to secure communication over the Internet between the management station and the unit. In order to provide secure communication, a valid SSL certificate from a certificate authority must be loaded into the unit. To learn more about certificates, refer to the certificate authority and ITU-T Recommendation X.509.

In other cases, you may want the unit to communicate with other applications such as an FTP server. You can configure the unit for secure communication with these applications by using the Application Management section, which manages the validation of certificate use.

Access the page System ▶Maintenance ▶Certificates to manage SSL certificates.

System ▶Maintenance ▶Certificates

You can view the SSL certificates installed on the unit in the Certificate Management section.

To view the details of the installed certificates, click the View button.

To delete a certificate, click the Delete button.

To import a new certificate, select the certificate by using Browse in the Certificate Import section, complete the other fields and click Upload when ready. The certificate will be loaded into the unit and will appear in the Certificate Management section.

To assign a certificate to a specific application such as an FTP server, select it from the Common Name drop-down list in the Application Management section. Complete the other parameters as required, then click Submit to assign it to the application.

For information on specific parameters, refer to the following three tables.

Certificate Parameters (System ▶Maintenance ▶Certificates)

Application Management (System ▶Maintenance ▶Certificates)

Certificate Import (System ▶Maintenance ▶Certificates)