Infoblox Infoblox-550 Manuel utilisateur

Version 4.0

Infoblox User Guide

For the Infoblox-550 Appliance

P/N 400-0106-100 Rev. A

Infoblox User Guide For the Infoblox-550 Appliance 1

Contents

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Product Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

Infoblox-550 Network Identity Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4

System, Environmental, and Power Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

Installing the Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Rack Mounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Powering the Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Cabling the Device to a Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Accessing the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11

Infoblox GUI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Infoblox CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Configuration Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

Example 1 – Single Infoblox-550 Appliance for External DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Task 1.1 Cable the Device to the Network and Turn On Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Task 1.2 Specify Initial Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Task 1.3 Specify Device Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Task 1.4 Define a NAT Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Task 1.5 Enable Zone Transfers on the Legacy Name Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Task 1.6 Import Zone Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Task 1.7 Designate the New Primary on the Secondary Name Server (at the ISP Site). . . . . . . . . . . . . . . . . 21

Task 1.8 Configure NAT and Policies on the Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Example 2 – HA Pair for Internal DNS and DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Task 2.1 Cable Devices to the Network and Turn On Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Task 2.2 Specify Initial Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Task 2.3 Specify Device Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Task 2.4 Enable Zone Transfers on the Legacy Name Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Task 2.5 Import Zone Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Task 2.6 Define Networks, Reverse-Mapping Zones, DHCP Ranges, and Infoblox Hosts . . . . . . . . . . . . . . . 29

Task 2.7 Define Multiple Forwarders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Task 2.8 Enable Recursion on External DNS Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Task 2.9 Modify the Firewall and Router Configurations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Task 2.10 Enable DHCP and Switch Service to the Infoblox Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Task 2.11 Manage and Monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Joining an ID Grid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37

Infoblox User Guide

For the Infoblox-550 Appliance

Contents

2 Infoblox User Guide

The contents of this document may not be copied or duplicated in any form, in whole or in part, without the prior

written permission of Infoblox, Inc.

The information in this document is subject to change without notice. Infoblox, Inc. shall not be liable for any

damages resulting from technical errors or omissions which may be present in this document, or from use of this

document.

This document is an unpublished work protected by the United States copyright laws and is proprietary to Infoblox,

Inc. Disclosure, copying, reproduction, merger, translation, modification, enhancement, or use of this document by

anyone other than authorized employees, authorized users, or licensees of Infoblox, Inc. without the prior written

consent of Infoblox, Inc. is prohibited.

For Open Source Copyright information, see Open Source Copyright and License Statements in the Online Help.

Trademark Statements

Infoblox, the Infoblox logo, and DNSone are trademarks or registered trademarks of Infoblox Inc.

All other trademarked names used herein are the properties of their respective owners and are used for

identification purposes only.

Warranty Information

Your purchase includes a 90-day software warranty and a one year limited warranty on the Infoblox appliance, plus

an Infoblox Warranty Support Plan and Technical Support. For more information about Infoblox Warranty

information, refer to Infoblox website, or contact Infoblox Technical Support.

Company Information

Infoblox is located at:

4750 Patrick Henry Drive

Santa Clara, CA 95054-1851, USA

Web: www.infoblox.com

www.infoblox.com/support

Phone: 408.625.4200

Toll Free: 888.463.6259

Outside North America: +1.408.716.4300

Fax: 408.625.4201

For the Infoblox-550 Appliance 3

Introduction

This guide provides an overview of the Infoblox-550 network identity appliance with Infoblox NIOS (Network Identity

Operating System) version 4.0 or later, and it explains how to install and configure it. Two configuration examples

are presented. The first example describes how to deploy a single device as an independent external DNS server.

The second describes how to deploy two devices as an HA (high availability) pair for internal DNS and DHCP

services.

Figure 1 Tasks in This Guide

Product Overview

The Infoblox-550 appliance provides a powerful, cost-effective solution for small and medium-sized businesses

that need integrated DNS (Domain Name System) and DHCP (Dynamic Host Configuration Protocol) services. In

addition to DNS and DHCP services, it also includes RADIUS (Remote Authentication Dial-In User Service) proxy and

TFTP (Trivial File Transfer Protocol) network services.

You can configure and manage the Infoblox-55o appliance through an easy-to-use GUI (graphical user interface)

that works seamlessly in both Windows and Linux environments using standard web browsers. This appliance

provides DNS and DHCP services for up to 500 users, 1000 host devices, and 5000 records while serving 10,000

DNS queries per second.

The Infoblox-550 appliance is RoHS and WEEE compliant, and its hardware meets the mechanical requirements for

FIPS 140-2 compliance.

Infoblox >

Learn about the Infoblox-550 device.

“Introduction” on p. 3

Install the device.

“Installing the Device” on p. 9

Equipment

Rack

Power

Source

Management

System

Network

Access the device.Configure the device.

Infoblox GUI

Infoblox CLI

“Accessing the Device”

on p. 11

“Configuration Examples” on p. 15

Introduction

4 Infoblox User Guide

Infoblox-550 Network Identity Appliance

The Infoblox-550 appliance is a 1-U platform that you can easily mount in a standard equipment rack using the

mounting brackets and bolts shipped with the device. The front panel components include the LCD (liquid crystal

display) panel and navigation buttons, communication ports, and indicator lights. The back panel components

include the power connector and switch, fan and air vent, and the model and serial number label.

Figure 2 shows the components on the front and back of the Infoblox-550, and Table 1 provides descriptions.

Figure 2 Infoblox-550 Appliance, Front and Back Views

HA Port

Console Port

Drive Indicator

Power Indicator

LAN1 Port

LAN2 Port

Navigation

Buttons

USB Port

LCD Panel

Power Outlet

On/Off SwitchFanAir VentModel Number

Serial Number

MGMT Port

Infoblox-550 Network Identity Appliance

For the Infoblox-550 Appliance 5

Table 1 Infoblox-550 Component Descriptions

Component Description

LCD Panel An LCD screen that displays HA (high availability) status, network settings, software

version number, hardware serial number, and software licenses. Additionally, you can

view and configure the IP address, netmask, and gateway for the LAN1 port.

Navigation

Buttons

Buttons that allow you to enter the IP address, subnet mask, and gateway of the LAN1

port through the LCD. Use the Up and Down arrow buttons to specify numbers and the

Left and Right buttons to navigate across digits. You must specify whether to save input

(OK) or discard it (CNCL). Selecting CNCL at any time returns you to the previous entry.

Entering OK on the third screen returns you to the system status screen.

USB Port Reserved for future use.

Console Port A male DB-9 serial port for a console connection to change basic configuration settings

and view basic system functions through the CLI (command line interface). Use the

serial cable and connection adapters that ship with the device to make a console

connection to this port.

Drive Indicator An LED that flashes green to indicate when the hard drive processes data.

Power Indicator An LED that glows green to indicate when there is power to the device.

MGMT Port A 10/100/1000-Mbps fast ethernet port that you can use for device management or

DNS service. You can enable the MGMT port and define its use through the GUI.

HA Port A 10/100/1000-Mbps fast ethernet port through which the active node in an HA (high

availability) pair connects to the network using a VIP (virtual IP) address. HA pair nodes

also use their HA ports for VRRP (Virtual Router Redundancy Protocol) advertisements.

LAN1 Port A 10/100/1000-Mbps fast ethernet port that connects a single device to the network. If

the MGMT port is not in use, a single device uses the LAN1 port for management traffic.

The passive node in an HA pair uses this port to synchronize the database with the

active node.

LAN2 Port Reserved for future use.

Model Number An identifier of the hardware model type, software type, and power cord type.

Serial Number The serial number of the device. Use it to register the device to obtain software upgrades

and technical support services.

Air Vent An air vent that allows warm air to flow out of the device. Do not obstruct.

Fan A fan to help maintain optimum operating temperature. Do not obstruct.

Power Outlet A three-prong power outlet for connecting the device to a standard AC power source.

On/Off Switch A power switch to turn the device on and off.

Introduction

6 Infoblox User Guide

Connector Pin Assignments

The Infoblox-550 appliance has three types of ports on its front panel:

•USB port (reserved for future use)

•Male DB-9 console port

•RJ-45 10Base-T/100Base-T/1000Base-T ethernet ports

Figure 3 shows the DB-9 and RJ-45 connector pin assignments. The DB-9 pin assignments follow the EIA232

standard. To make a serial connection from your management system to the console port, you can use the RJ-45

rollover cable and two female RJ-45-to-female DB-9 adapters that ship with the device, or a female DB-9-to-female

DB-9 null modem cable. The RJ-45 pin assignments follow IEEE 802.3 specifications. All Infoblox ethernet ports are

auto-sensing and automatically adjust to standard straight-through and cross-over ethernet cables.

10Base-T ethernet and 100Base-T fast ethernet use the same two pairs of wires. The twisted pair of wires

connecting to pins 1 and 2 transmit data, and the twisted pair connecting to pins 3 and 6 receive data. For

1000Base-T connections, all four twisted-pair wires are used for bidirectional traffic.

Figure 3 Connector Pin Assignments

21 345

6789

21346578

78653421

DB-9 Connector Pin Assignments

RJ-45 Connector Pin Assignments

Pin 10Base-T

100Base-T

Signal

1000Base-T

Signal T568A

Straight-Through

Wire Color

T568B

Straight-Through

Wire Color

1Transmit+ BI_DA+ White/Green White/Orange

2Transmit- BI_DA- Green Orange

3Receive+ BI_DB+ White/Orange White/Green

4 (not used) BI_DC+ Blue Blue

5 (not used) BI_DC- White/Blue White/Blue

6Receive- BI_DB- Orange Green

7 (not used) BI_DD+ White/Brown White/Brown

8 (not used) BI_DD- Brown Brown

Male DB-9 Console Port

RJ-45 Ethernet Ports

Pin Signal Direction

1 (not used)

2Receive Input

3Transmit Output

4DTEReady Output

5 Ground —

6 DCE Ready Input

7 RTS (Request to Send) Output

8 CTS (Clear to Send) Input

9 (not used)

Legend: BI_D = bidirectional; A, B, C, D = wire pairings

(Looking into the console

port on an Infoblox device)

(Looking into RJ-45

ethernet ports on an

Infoblox device)

System, Environmental, and Power Specifications

For the Infoblox-550 Appliance 7

Ethernet Port LEDs

To see the link activity and connection speed of an ethernet port, you can look at its Link/Act and Speed LEDs. The

status the LEDs convey through their color and illumination (steady glow or blinking) are presented in Figure 4.

Figure 4 LEDs

System, Environmental, and Power Specifications

Understanding the full range of specifications for the Infoblox-550 appliance is critical for maintaining and

protecting the hardware from misuse. There are three types of specifications. System specifications describe the

physical characteristics of the device. Environmental specifications describe the temperature and moisture limits

the device can withstand. Power specifications describe the electrical range within which the device circuitry can

operate.

System Specifications

•Form Factor: 1-U rack-mountable device

•Dimensions: 1.75” H x 17.25” W x 15” D (4.45 cm H x 43.82 cm W x 38.1 cm)

•Weight: Approximately 13 pounds

•Ethernet Ports: MGMT, HA, LAN1, LAN2 – auto-sensing 10Base-T/100Base-T/1000Base-T

•Serial Port: DB-9 (9600/8n1, Xon/Xoff)

•LCD Panel: LCD (liquid crystal display) with input buttons

Environmental Specifications

•Operating Temperature: 41 to 95 degrees F (5 to 35 degrees C)

•Storage Temperature: -40 to 122 degrees F (-40 to 50 degrees C)

•Relative Humidity: 5% to 95%, relative humidity (non-condensing)

SpeedLink/Act SpeedLink/Act

Label Color Port Status

Link/Act Steady Green Link is up but inactive

Blinking Green Link is up and active

Dark Link is down

Speed Steady Amber 1000 Mbps

Steady Green 100 Mbps

Dark 10 Mbps

MGMT

LAN1

LAN2

Introduction

8 Infoblox User Guide

Electrical Power Specifications

•Input Voltage: 100 – 240 VAC switchable, 47 – 63 HZ, 3A

•Output Power: 250 watts

•Power plug and cable specifications by region:

Region Plug Type Cable Type Maximum

Power

Rating

Maximum

Temperature

Rating

North America NEMA5-15P

3-prong male plug

VCTF 3C 18 AWG 7A, 125 V 75° C

Japan NEMA5-15P

3-prong male plug

VCFI 3G 12A, 125 V 60° C

Europe CEE7 standard VII

2-prong male plug

H05VV-F 6A, 250 V 70° C

United Kingdom LP-60L

3-prong male plug

with fuse

H05VV-F 10A, 250 V 70° C

For the Infoblox-550 Appliance 9

Installing the Device

Follow these instructions to rack mount the device, connect it to a power source, and cable it to a network. However,

before proceeding review the Safety Guide and follow the necessary precautions.

Rack Mounting

The device mounts into a standard 19” (48 cm) equipment rack. In addition to the screws and brackets that ship

with the product, you also need a screwdriver with a cross-headed tip.

Attach the brackets to the device, and mount it to an equipment rack.

1. Remove the four screws that ship attached to the left and right sides of the device—two screws per side.

2. Remove the pair of brackets from the accessory kit that ships with the device.

3. Position one bracket so that the two holes in the bracket align with two of the holes on one side of the device.

Note: There are five evenly spaced holes on each side of the device. You can secure the brackets to any two

adjacent holes so that you can mount the device more or less deeply in the rack.

4. Secure the bracket to the device with two of the screws that you removed previously.

5. Secure the second bracket in the same position on the other side of the device.

6. Using the screws from the accessory kit, attach the brackets to the equipment rack.

Powering the Device

Use the power cable that ships with the Infoblox-550 appliance to connect it to a power source.

1. Make sure the power switch on the device is turned off.

2. Connect a power cable between the power connector on the back of the appliance and a properly grounded and

rated power circuit that meets the provisions of the current edition of the National Electrical Code, or other

wiring rules that apply to your location. Make sure the outlet is near the appliance and is easily accessible.

3. Turn on the power switch.

Table des matières

Autres manuels Infoblox Pare-feu

Infoblox

Infoblox Infoblox-2000-A Manuel utilisateur

Manuels Pare-feu populaires d'autres marques

Cisco

Cisco S190 Manuel utilisateur

Fortinet

Fortinet FortiGate Voice Series Manuel utilisateur

ADTRAN

ADTRAN NetVanta 2300 Manuel utilisateur

SecureLogix

SecureLogix ETM System Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVX538 Manuel utilisateur

Lanner

Lanner FW-8877 Manuel utilisateur

Huawei

Huawei USG6000 Series Manuel d'installation et d'exploitation

H3C

H3C SecPath F5000-AI-15 Manuel utilisateur

Nexcom

Nexcom DNA 1150 Manuel utilisateur

Fortinet

Fortinet FortiGate-60 series Manuel utilisateur

Cisco

Cisco 3110 Manuel

Draytek

Draytek Vigor2860 Series Manuel utilisateur

Lanner electronics

Lanner electronics FW-7650 Series Manuel utilisateur

Swisscom

Swisscom Internet Backup Manuel utilisateur

SonicWALL

SonicWALL NSa 5700 Manuel utilisateur

DPtech

DPtech FW1000 SERIES Manuel utilisateur

FEITIAN

FEITIAN MultiPass FIDO Manuel utilisateur

EBLOCKER

EBLOCKER PRO Manuel utilisateur