Table of Contents Table of Contents Introduction Appliance Hardware Setting Up the T820/1220 Configuring Remote Access Configuring Link Redundancy on Tufin Appliances Installing and Configuring TOS Aurora Upgrading TOS Updating BIOS and iDRAC Firmware Restoring Factory Defaults Deleting Your Data...
Trademarks 2024 Tufin Technologies Ltd. Tufin, Unified Security Policy, Tufin Orchestration Suite and the Tufin logo are trademarks of Tufin. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. Copyright 2003-2024, Tufin Software Technologies Ltd.
The Information tag is a slide-out label panel that contains system information such as Service Tag, NIC, MAC address, and so on. Drive blank Enables you to install drives that are supported on your system. Copyright 2003-2024, Tufin Software Technologies Ltd.
NIC ports Not supported. Serial port Not supported. LED Light Indicators Status LED indicators in the Dell EMC PowerEdge R450 Installation and Service Manual. Rack Installation See the Dell EMC PowerEdge R450 rack installation guide. Copyright 2003-2024, Tufin Software Technologies Ltd.
Page 6
Power supply capacity 800 watts ≈ 2729.7 btu/h Input current 4.5 amps Airflow 29.4 CFM ≈ 13.9 l/s Sound power 3.8 bels Weight 18.6 kg ≈ 41 lbs Air temperature rise 30 °C ≈ 54 °F Copyright 2003-2024, Tufin Software Technologies Ltd.
The predefined IP address (192.168.1.100/24) appears. 7. Change the IP address to your desired value. This must be done before you connect the appliance to the network. The IP address is required for iDRAC connectivity. Copyright 2003-2024, Tufin Software Technologies Ltd.
Page 8
8. Connect the appliance to the network via one of the ports. Only one connection is supported for production traffic. 9. To set up serial connection through iDRAC see the Configuring BIOS for Serial Connection procedure in iDRAC9 User's Guide. Copyright 2003-2024, Tufin Software Technologies Ltd.
(iDRAC). iDRAC is a remote server management controller that allows you to securely access your Tufin appliance from any location. It enables you to upgrade TufinOS or TOS on the appliance without having to physically access the server as well as deploy, manage, configure, and troubleshoot from any location.
Page 10
T-820/1220 Quick Start Guide Configuring Remote Access Monitor the health of your system Access your appliance's Virtual Console For more information, see iDRAC9 User's Guide. Copyright 2003-2024, Tufin Software Technologies Ltd.
T-820/1220 Quick Start Guide Configuring Link Redundancy on Tufin Appliances Configuring Link Redundancy on Tufin Appliances This procedure is supported for TufinOS 4.30 and above. For appliances with two network interfaces, NIC bonding renders the two physical interfaces as one virtual interface. This creates link redundancy, allowing one of the interfaces to take over in case of failure or disruption of the primary Ethernet link.
Page 12
T-820/1220 Quick Start Guide Configuring Link Redundancy on Tufin Appliances 3. Press Add. 4. From the list of connection types, select Bond and press Enter. Edit Connection screen appears. 5. Enter: Profile name: <meaningful profile name, for example: bond0> Device: <port's device name>...
Page 13
T-820/1220 Quick Start Guide Configuring Link Redundancy on Tufin Appliances Mode: Active Backup Primary: <name of first network interface> Link Monitoring: MII (recommended) Monitoring frequency: 100 ms Link up delay: 0 ms Link down delay: 0 ms 8. Configure the IP address settings in the IPv4 CONFIGURATION.
Page 14
T-820/1220 Quick Start Guide Configuring Link Redundancy on Tufin Appliances 1. Select Activate a Connection. 2. Select the first network interface that supplied the machine connectivity, press the right arrow button, and press Deactivate. 12. Make sure the bond0 interface is activated. It should have the “*“ character before the name.
Page 15
T-820/1220 Quick Start Guide Configuring Link Redundancy on Tufin Appliances Duplex: full Link Failure Count: 0 Permanent HW addr: 04:32:01:46:eb:e0 Slave queue ID: 0 Delete Network Bond Interface This procedure guides you in deleting the network bond interface using nmuti.
Page 16
T-820/1220 Quick Start Guide Configuring Link Redundancy on Tufin Appliances 10. Select the first network interface and press Activate. 11. Press Back to return to the main menu. 12. Select Quit, and press Enter to close the nmtui. 13. If you uninstalled TOS at the beginning of this procedure, reinstall it now.
Installing and Configuring TOS Aurora This procedure is only relevant for versions R22-2 and above. If you are using a previous version, contact Tufin Support. You must install the version of TOS Aurora that is found on your appliance before upgrading to any later version of TOS Aurora.
Set Gateway and DNS Servers to the IPs used by your organization. g. Restart the network service. systemctl restart NetworkManager.service Install TOS Aurora See the Tufin Knowledge Center for instructions on installing TOS Aurora. USB installation iDRAC installation Check for Updates...
Page 19
T-820/1220 Quick Start Guide Installing and Configuring TOS Aurora Upgrade TOS Aurora To upgrade your version of TOS Aurora, see Upgrade From TOS Aurora. Copyright 2003-2024, Tufin Software Technologies Ltd.
T-820/1220 Quick Start Guide Upgrading TOS Upgrading TOS The T-820/1220 Tufin appliance comes with TOS R23-1 PGA1.0.0 pre-installed. To upgrade your appliance to a newer version, see Upgrade From TOS Aurora in the Tufin Knowledge Center. Copyright 2003-2024, Tufin Software Technologies Ltd.
Updating BIOS and iDRAC Firmware Updating BIOS and iDRAC Firmware Overview This procedure is relevant only for T-1220 and T-820 appliances. Single Node Setup Downtime: Updating BIOS reboots the appliance, and updating the iDRAC reboots the RMM, making iDRAC unresponsive for a few minutes.
Page 22
2. From the iDRAC screen, click the Maintenance menu. 3. Select System Update. 4. From the System Update > Manual Update screen: Location Type: Local Update Path: Select the file that you downloaded at the start of this procedure. Copyright 2003-2024, Tufin Software Technologies Ltd.
Page 23
2. From the iDRAC screen, click the Maintenance menu. 3. Select System Update. 4. From the System Update > Manual Update screen: Location Type: Local Update Path: Select the file that you downloaded at the start of this procedure. Copyright 2003-2024, Tufin Software Technologies Ltd.
Page 24
TOS. To prevent data corruption, this procedure will utilize the Cluster Node Maintenance guide to first drain each node before updating the BIOS and iDRAC. 1. Verify that the appliance version is T-1220 or T-820. Run the command: dmidecode -s chassis-version 2.
Page 25
In the output under the line k3s.service - Aurora Kubernetes, two lines should appear - Loaded... and Active... similar to the example below. If they appear, continue with the next step, otherwise contact Tufin Support for assistance.
Page 26
2. On the primary data node, check the TOS status. sudo tos status 3. In the output, check if the System Status is Ok and all the items listed under Components appear as ok. If this is not the case, contact Tufin Support. Example output: tos status...
Page 27
Found active backup "23-august-2021-16-18" 3. Run the following command to display the list of backups saved on the node: sudo tos backup list Example output: sudo tos backup list ["23-august-2021-16-18"] Started: "2021-08-23 13:18:43 +0000 UTC" Copyright 2003-2024, Tufin Software Technologies Ltd.
Page 28
2. From the iDRAC screen, click the Maintenance menu. 3. Select System Update. 4. From the System Update > Manual Update screen: Location Type: Local Update Path: Select the file that you downloaded at the start of this procedure. Copyright 2003-2024, Tufin Software Technologies Ltd.
Page 29
2. From the iDRAC screen, click the Maintenance menu. 3. Select System Update. 4. From the System Update > Manual Update screen: Location Type: Local Update Path: Select the file that you downloaded at the start of this procedure. Copyright 2003-2024, Tufin Software Technologies Ltd.
Page 30
In the output under the line k3s.service - Aurora Kubernetes, two lines should appear - Loaded... and Active... similar to the example below. If they appear, continue with the next step, otherwise contact Tufin Support for assistance. Example output:...
Page 31
2. On the primary data node, check the TOS status. sudo tos status 3. In the output, check if the System Status is Ok and all the items listed under Components appear as ok. If this is not the case, contact Tufin Support. Example output: tos status...
Page 32
tos status 2. In the output, check if the System Status is Ok and all the items listed under Components appear as Ok. If this is not the case, contact Tufin Support. Example output for a central cluster data node:...
Page 34
2. Verify that the node roles are as you intended, by running sudo tos cluster node list on any data node. 3. We strongly recommend performing a one-time backup and exporting it immediately, as all prior backups are deleted from the original primary data node. Copyright 2003-2024, Tufin Software Technologies Ltd.
Restoring factory defaults will delete all information on the appliance including database records, backup files and logs. We recommend you contact Tufin Support before restoring factory defaults. You can restore the factory defaults on the appliances by uploading the appliance image via iDRAC.
If you are returning a loaned appliance, which was used for evaluation, and want to delete your data, run the following commands: $ sudo rm -rf /opt/tufin/ $ sudo rm -rf /opt/tos/ $ sudo rm -f $(which tos) Copyright 2003-2024, Tufin Software Technologies Ltd.
Need help?
Do you have a question about the T-820 and is the answer not in the manual?
Questions and answers