Enable the Management Port

On certain PacketShaper models (such as the 1700, 3500, and 7500), you can use the Ethernet management port (MGMT) to access and manage your PacketShaper. This port can be connected to the same network the PacketShaper is monitoring or to a different network (such as a management network). When the MGMT port is connected to a management network, you may want to enable the Dedicated Management Port option so that the unit cannot be accessed from other networks; this provides increased security. Enabling management port access will cause loss of remote connectivity to the unit through all other ports.

When considering whether to enable the dedicated management port feature, bear in mind that certain Packeteer features will not function properly unless the network administrator provides outside hosts with a route to reach the PacketShaper through the MGMT port. These features include, but are not limited to, the following:

• PolicyCenter
• Access Link Monitoring
• Frame Relay and ATM
• HP OpenView
• Flow Detail Records
• Adaptive response
• SNMP traps and polling from third-party applications
• Synthetic transactions
• Customer portal traffic (if the portal IP address is set to be the same as the management IP address)

To enable the dedicated management port:

1. Make sure an Ethernet cable connects the MGMT port to a router on your management network.

2. Click the setup tab.

3. From the Choose setup page list, choose management port. The Management Port setup page appears.  show screen

4. For Dedicated Management Port, choose on.

5. Click apply changes.

Notes:

• Changing management port access may cause temporary loss of access to the PacketShaper through the MGMT port.
• The MGMT port is considered an outside port. Therefore, securing the outside interface will secure the MGMT port as well. For example, to allow access from only two IP addresses issue the following command: setup secure outside list 10.1.1.100 10.1.12.1. See also Specify Security Settings.