About Host Settings
Host settings are located under Administration > Networking: Host Settings. Host settings including host networking, proxy, and interface settings.
When you first run the installation wizard, you configure the appliance’s required network host settings. Only change these settings if you need to make further modifications, perform extra configuration, or check the DNS setup:
Name—Modify the hostname only if your deployment requires it.
DNS Settings—We recommend you use DNS resolution.
Hosts—If you don’t use DNS resolution, or if the host doesn’t have a DNS entry, you can create a host-IP address resolution map.
Configure How this Appliance Connects to the Network—Configure proxy addresses for web or FTP proxy access to the SteelHead. You can also create a whitelist of domains allowed to bypass the proxy. Because SteelHead backups to SCC are blocked if a proxy is enabled, this option lets you enter an exception to allow direct SteelHead to SCC communication.
About SSH and HTTPS connections to managed appliances
To upgrade SCC connections to managed appliances from IPv4 to IPv6, you must disconnect and then reconnect the SSH and HTTPS connections. The SCC uses these protocols to communicate with managed appliances. Simply changing the SCC hostname from the SteelHead side will not reset the SSH connection. To properly re-establish communication, you must manually break the SSH and HTTPS channels on the SCC. You can do this in any of the following ways:
Disable the IPv4 address from the Interface.
Disable the IPv6 address from the Interface.
Reboot the SCC.
Alternatively, you can also break the SSH and HTTPS channels by:
running the CLI command no scc enable on the managed appliance.
specifying the new IP address of the appliance in the Manage > Appliances: Appliances Pages: Host Settings.
changing the IP address of the SCC in the Host Settings page.
This table summarizes the CLI steps to establish the SSH/HTTPS channels.
Appliance conditions
No SSH/HTTPS channels
There is SSH/HTTPS channel already over IPv4
There is SSH/HTTPS channel already over IPv6
SteelHead & SCC reachable over IPv4 and IPv6
To establish an SSH/HTTPS channels:
scc hostname <ip-address> scc enable
Until  the existing SSH/HTTPS channel is broken explicitly the IPv4 SSH/HTTPS channel will continue to  exist. Break the channels using the procedures described above.
To reestablish the SSH/HTTPS channels:
scc hostname <ip-address>
scc enable
Until  the existing SSH/HTTPS channel is broken explicitly the IPv6 SSH/HTTPS channel will continue to  exist. Break the channels using the procedures described above.
To reestablish the SSH/HTTPS channels:
scc hostname <ip-address>
scc enable
SteelHead & SCC reachable over IPv4 only
To establish the SSH/HTTPS channel over IPv4:
scc hostname <ip-address> scc enable
To establish the SSH/HTTPS channel over IPv4:
scc hostname <ip-address>
scc enable
Not applicable
SteelHead & SCC reachable over IPv6 only
To establish the SSH/HTTPS channel over IPv6:
scc hostname <ip-address> scc enable
Not applicable
To establish the SSH/HTTPS channel over IPv6:
scc hostname <ip-address>
scc enable
About DNS settings
Primary DNS Server
Specifies the IP address for the primary name server. The IP address can be either IPv4 or IPv6. For IPv6 specify an IP address using this format: eight 16-bit hexadecimal strings separated by colons, 128-bits. For example: 2001:38dc:0052:0000:0000:e9a4:00c5:6282
You don’t need to include leading zeros. For example: 2001:38dc:52:0:0:e9a4:c5:6282
You can replace consecutive zero strings with double colons (::). For example: 2001:38dc:52::e9a4:c5:6282
Secondary DNS Server
Specifies the IP address for the secondary name server.
Tertiary DNS Server
Specifies the IP address for the tertiary name server.
DNS Domain List
Specifies an ordered list of domain names. If you specify domains, the system automatically finds the appropriate domain for each of the hosts that you specify in the system.
About Host settings
Add a New Host
Manually adds a host if you are not using DNS and creates a Host-IP address resolution map.
IP Address
Specifies the IP address of the host.
Hostname
Specifies the hostname of the host.
Remove Selected
Removes the selected host.
Configuring proxy settings
You configure proxy settings under Administration > Networking: Host Settings. These configuration options are available under Configure How this Appliance Connects to the Network:
Enable Proxy Settings
Provides network proxy access to the SteelHead. It enables the SteelHead to use a proxy to contact the Riverbed Licensing Portal and fetch licenses in a secure environment. You can optionally require user credentials to communicate with the proxy, and you can specify the method used to authenticate and negotiate user credentials. Proxy access is disabled by default.
RiOS supports these proxies: Squid, Blue Coat Proxy SG, Microsoft WebSense, and McAfee Web Gateway.
Web/FTP Proxy
Specifies the IP address, either IPv4 or IPv6, for the network or FTP proxy. For IPv6 specify an IP address using this format: eight 16-bit hexadecimal strings separated by colons, 128-bits. For example: 2001:38dc:0052:0000:0000:e9a4:00c5:6282
You don’t need to include leading zeros. For example: 2001:38dc:52:0:0:e9a4:c5:6282
You can replace consecutive zero strings with double colons (::). For example: 2001:38dc:52::e9a4:c5:6282
Port
Specifies the port for the network or FTP proxy. The default port is 1080.
Enable Authentication
Requires user credentials for use with network or FTP proxy traffic. Specify these values to authenticate the users:
User Name
Specify a username.
Password
Specify a password.
Authentication Type
Select an authentication method from the drop-down list:
Basic
Authenticates user credentials by requesting a valid username and password. This is the default setting.
NTLM
Authenticates user credentials based on an authentication challenge and response.
Digest
Provides the same functionality as basic authentication; however, digest authentication improves security because the system sends the user credentials across the network as a Message Digest 5 (MD5) hash.
Proxy Whitelist
Adds or remove domains from a proxy whitelist.
About base interfaces
You view and modify settings for the appliance primary and auxiliary interfaces under Administration> Networking: Base Interfaces.
When you initially ran the Configuration wizard, you set required settings for the base interfaces. Only use the controls on this page if you require modifications or additional configuration:
Primary Interface
On the appliance, the primary interface is the port you connect to the LAN switch. The primary interface is the appliance management interface. You connect to the primary interface to use the Management Console or the CLI.
Auxiliary Interface
On the appliance, the auxiliary interface is an optional port you can use to connect the appliance to a non-Riverbed network management device. The IP address for the auxiliary interface must be on a subnet different from the primary interface subnet.
Main Routing Table
Displays a summary of the main routing table for the appliance. If necessary, you can add static routes that might be required for out-of-path deployments or particular device management subnets.
Configuring base interfaces
You configure base interfaces under Administration > Networking: Base Interfaces. These configuration options are available under Primary Interface:
Enable Primary Interface
Enables the appliance management interface.
Obtain IPv4 Address Automatically
Displays multiple IPv4 values assigned by DHCP server. (A DHCP server must be available so that the system can request the IP address from it.)
Enable IPv4 Dynamic DNS
Sends the hostname with the DHCP request for registration with Dynamic DNS.
Specify IPv4 Address Manually
Indicates you don’t use a DHCP server to set the IPv4 address. Specify these settings:
IPv4 Address
IPv4 Subnet Mask
Default IPv4 Gateway—The default gateway must be in the same network as the primary interface.
Obtain IPv6 Address Automatically
Displays multiple IPv6 values assigned by DHCP server. (A DHCP server must be available so that the system can request the IP address from it.) If you change the primary or aux interface from IPv4 to IPv6 you must restart the httpd service. From the SCC command line, run the pm process httpd restart command.
Enable IPv6 Dynamic DNS
Sends the hostname with the DHCP request for registration with Dynamic DNS.
Specify IPv6 Address Manually
Sets an IPv6 address. Specify these settings to set an IPv6 address:
IPv6 Auto-Assigned—Displays the link-local address that is automatically generated when IPv6 is enabled on the interface.
IPv6 Address—Specify a combination of both the IPv6 address and IPv6 prefix. Use this format: <IPv6-address>/<IPv6-prefix>. For example: 210::33/64
Add a New IPv6 Address—This option allows you to configure multiple IPv6 Addresses to the interface. Use this format: <IPv6-address>/<IPv6-prefix>. New IPv6 addresses are displayed as an entry with this label: IPv6-<address>.
IPv6 Gateway—Specify the gateway IP address. The gateway must be in the same network as the primary interface.
To modify an existing IPv6 address, empty the contents of the corresponding text field and click Apply.
To delete an existing IPv6 address, update the contents of the corresponding text field and click Apply.
If you selected Specify IPv6 Address Manually and assigned multiple IP addresses to your interface, then if you select Obtain IPv6 Address Automatically and click Apply, all the IP address assigned manually will be deleted.
If you change the primary or aux interface from IPv4 to IPv6 you must restart the httpd service. From the SCC command line, run the pm process httpd restart command.
MTU
Specifies the MTU value. The MTU is the largest physical packet size, measured in bytes, that a network can send. The default value is 1500.
These configuration options are available under Auxiliary Interface:
Enable Aux Interface
Enables an auxiliary interface, which can be used only for managing the SCC. Typically, this is used for device-management networks.
Obtain IPv4 Address Automatically
Displays multiple IPv4 values assigned by DHCP server. (A DHCP server must be available so that the system can request the IP address from it.)
Enable IPv4 Dynamic DNS
Sends the hostname with the DHCP request for registration with Dynamic DNS.
Specify IPv4 Address Manually
Indicates you don’t use a DHCP server to set the IPv4 address. Specify these settings:
IPv4 Address
IPv4 Subnet Mask
Obtain IPv6 Address Automatically
Displays multiple IPv6 values assigned by DHCP server. (A DHCP server must be available so that the system can request the IP address from it.)
If you change the primary or aux interface from IPv4 to IPv6 you must restart the httpd service. From the SCC command line, run the pm process httpd restart command:
Enable IPv6 Dynamic DNS
Sends the hostname with the DHCP request for registration with Dynamic DNS.
Specify IPv6 Address Manually
Sets an IPv6 address. Specify these settings:
IPv6 Auto-Assigned—Displays the link-local address that is automatically generated when IPv6 is enabled on the interface.
IPv6 Address—Specify a combination of both the IPv6 address and IPv6 prefix. Use this format: <IPv6-address>/<IPv6-prefix>. For example: 210::33/64
Add a New IPv6 Address—Allows you to configure multiple IPv6 addresses to the interface. Use this format: <IPv6-address>/<IPv6-prefix>. New IPv6 addresses are displayed as an entry with this label: IPv6 -<address>.
To modify an existing IPv6 address, update the contents of the corresponding text field and click Apply.
To delete an existing IPv6 address, empty the contents of the corresponding text field and click Apply.
If you selected Specify IPv6 Address Manually and assigned multiple IP addresses to your interface, then if you select Obtain IPv6 Address Automatically and click Apply, all the IP address assigned manually will be deleted.
If you change the primary or aux interface from IPv4 to IPv6 you must restart the httpd service. From the SCC command line, run the pm process httpd restart command:
MTU
Specifies the MTU value. The MTU is the largest physical packet size, measured in bytes, that a network can send. The default value is 1500.
Configuring routes for IPv4
Under Main IPv4 Routing Table, you can configure this if your device-management network requires static routes. You can add or remove routes from the list using these configuration options:
Add a New Route
Displays the controls for adding a new route.
Destination IPv4 Address
Specifies the destination IP address for the out-of-path appliance or network management device.
IPv4 Subnet Mask
Specifies the subnet mask.
Gateway IPv4 Address
Specifies the IP address for the gateway. The gateway must be in the same network as the primary or auxiliary interface you’re configuring.
Interface
Specifies an interface for the IPv4 route from the drop-down list.
Add
Adds the route to the table list.
Configuring routes for IPv6
Under Main IPv6 Routing Table, you can configure static routing in the main routing table if your device-management network requires static routes. You can add or remove routes from the list using these configuration options:
Add a New Route
Displays the controls for adding a new route.
Destination IPv6 Address
Specifies the destination IP address.
IPv6 Prefix
Specifies a prefix. The prefix length is from 0 to 128 bits, separated from the address by a forward slash (/).
Gateway IPv6 Address
Specifies the IP address for the gateway. The gateway must be in the same network as the primary or auxiliary interface you’re configuring.
Interface
Specifies an interface for the IPv6 route from the drop-down list.