Unlike terminals that communicate with appliances in the same application, raw interfaces communicate outside an appliance -- including talking with other appliances as well as the outside world.
Raw interfaces are very similar to virtual network interfaces in virtual machines and to a NIC in traditional servers. Their IP addresses are assigned as part of an application configuration. In addition, the APK automatically configures the IP addresses on the raw interfaces, then configures the netmask and gateway as well as the NAS servers based on the IP address.
Raw interfaces support up to four IP addresses. A single raw interface on an appliance becomes the default gateway and can be used to access the external network. The appliance cannot use an IP address other than the ones that configured on the application. For easy access, these IP addresses display on the grid dashboard. Any packages containing an invalid IP address are dropped.
Although the APK automatically configures the netmask and gateway, this functionality can be disabled using the APK config_extif command. When disabled, the appliance start up scripts are expected to configure the network settings for the raw interface using the assigned settings located in the appliance instance descriptor file. When you disable the raw interfaces, auto configuration is useful when the appliance has more than one raw interface and the appliance wants to control the routing and name resolution.
When a raw interface is placed on a specific VLAN, the VLAN tagging is handled automatically. The appliance should expect and send packages without 802.19 VLAN tags.
Versions of CA AppLogic prior to version 3.5 supported only a single raw interface called External. This interface did not require a connector to an external interface. It was configured through properties. This legacy raw interface is supported only for backward compatibility and should not be used for new appliances.
Since the APK does not automatically configure the legacy raw interface, you must use appliance startup scripts. The network settings, such as the IP address, netmask, gateway, and DNS server, are typically configured through the Properties settings. The IP address is enforced based on whether you define the IP address as an IP owned property. In an IP owned property, the IP address is verified as being in the allowed range and will not allow the interface to use any other IP address. Up to four IP-owned properties can be defined.
If the appliance has no IP-owned properties, the IP address of the legacy raw interface are not verified or enforced. This should be used with caution because it can allow IP address hijacking. It is supported only for backward capability. Support may be dropped or disabled in future versions.
The default raw interface sends events and provides SSH and web console access into the appliance.
|
Copyright © 2013 CA Technologies.
All rights reserved.
|
|