The following describes how to install a single SSB unit.
To install a single SSB unit
Optional step: Install SSB into a rack with the slide rails. Slide rails are available for all SSB appliances.
Connect the cables.
Connect the Ethernet cable facing your LAN to the Ethernet connector labeled as 1. This is the external interface of SSB. This interface is used for the initial configuration of SSB, and for communication between SSB and the clients. (For details on the roles of the different interfaces, see "Network interfaces" in the Administration Guide.)
Connect the cable facing your LAN to the SFP+ connector labeled as A. This is the external interface of SSB. This interface is used for the initial configuration of SSB, and for communication between SSB and the clients. (For details on the roles of the different interfaces, see "Network interfaces" in the Administration Guide.)
For a list of compatible connectors, see Linux* Base Driver for 10 Gigabit Intel® Ethernet Network Connection Overview. Note that SFP transceivers encoded for non-Intel hosts may be incompatible with the Intel 82599EB host chipset found in SSB.
Do not leave any unused SFP/SFP+ transceiver in the 10Gbit interface. It may cause network outage.
Connect an Ethernet cable that you can use to remotely support the SSB hardware to the IPMI interface of SSB. For details, see the following documents:
For syslog-ng Store Box Appliance 3000 and 3500, see the IPMI User's Guide.
Connect the IPMI before plugging in the power cord. Failing to do so will result in IPMI failure.
|Caution: SECURITY HAZARD!
The IPMI interface, like all out-of-band management interfaces, has known vulnerabilities that One Identity cannot fix or have an effect on. To avoid security hazards, One Identity recommends that you only connect the IPMI interface to well-protected, separated management networks with restricted accessibility. Failing to do so may result in an unauthorized access to all data stored on the SSB appliance. Data on the appliance can be unencrypted or encrypted, and can include sensitive information, for example, passwords, decryption keys, private keys, and so on.
For more information, see Best Practices for managing servers with IPMI features enabled in Datacenters.
The administrator of SSB must be authorized and able to access the IPMI interface for support and troubleshooting purposes in case vendor support is needed.
The following ports are used by the IPMI interface:
Port 623 (UDP): IPMI (cannot be changed)
Port 5123 (UDP): floppy (cannot be changed)
Port 5901 (TCP): video display (configurable)
Port 5900 (TCP): HID (configurable)
Port 5120 (TCP): CD (configurable)
Port 80 (TCP): HTTP (configurable)
Optional step: Connect the Ethernet cable to be used for managing SSB after its initial configuration to the Ethernet connector labeled as 2. This is the management interface of SSB. (For details on the roles of the different interfaces, see "Network interfaces" in the Administration Guide.)
Optional step: Connect the Ethernet cable connecting SSB to another SSB node to the Ethernet connector labeled as 4. This is the high availability (HA) interface of SSB. (For details on the roles of the different interfaces, see "Network interfaces" in the Administration Guide.)
Power on the hardware.
Change the BIOS password on the syslog-ng Store Box. The default password is ADMIN or changeme, depending on your hardware.
Change the IPMI password on the syslog-ng Store Box. The default password is ADMIN or changeme, depending on your hardware.
Ensure that you have the latest version of IPMI firmware installed. You can download the relevant firmware from the One Identity Knowledge Base:
To change the IPMI password, connect to the IPMI remote console.
If you encounter issues when connecting to the IPMI remote console, add the DNS name or the IP address of the IPMI interface to the exception list (whitelist) of the Java console. For details on how to do this, see the Java FAQ entry titled How can I configure the Exception Site List?.
Following boot, SSB attempts to receive an IP address automatically via DHCP. If it fails to obtain an automatic IP address, it starts listening for HTTPS connections on the 192.168.1.1 IP address.
To configure SSB to listen for connections on a custom IP address, complete the following steps:
Access SSB from the local console, and log in with username root and password default.
In the Console Menu, select Shells > Core shell.
Change the IP address of SSB:
ip addr add <IP-address>/24 dev eth0
Replace <IP-address> with an IPv4 address suitable for your environment.
Set the default gateway using the following command:
ip route add default via <IP-of-default-gateway>
Replace <IP-of-default-gateway> with the IP address of the default gateway.
Type exit, then select Logout from the Console Menu.
Connect to the SSB web interface from a client machine and complete the Welcome Wizard as described in "The Welcome Wizard and the first login" in the Administration Guide.
The syslog-ng Store Box Administrator Guide is available on the syslog-ng Store Box Documentation page.
The following describes how to install SSB with high availability support.
To install SSB with high availability support
For the first SSB unit, complete Installing the SSB hardware.
For the second SSB unit, complete Steps 1-3 of Installing the SSB hardware.
Connect the two units with an Ethernet cable via the Ethernet connectors labeled as 4.
Power on the second unit.
Change the BIOS and IPMI passwords on the second unit. The default password is ADMIN or changeme, depending on your hardware.
Connect to the SSB web interface of the first unit from a client machine and enable high availability mode. Navigate to Basic Settings > High Availability . Click Convert to Cluster, then reload the page in your browser.
Click Reboot Cluster.
Wait until the slave unit synchronizes its disk to the master unit. Depending on the size of the hard disks, this may take several hours. You can increase the speed of the synchronization via the SSB web interface at Basic Settings > High Availability > DRBD sync rate limit.
The syslog-ng Store Box (SSB) appliances are built on high performance, energy efficient, and reliable hardware that are easily mounted into standard rack mounts.
The following sections provide detailed information of SSB appliances.
Number of disk slots: 2 (internal only)
Redundant PSU: 0
Chipset: Intel 3420
IPMI: Nuvoton WPCM450, SMT (Latest ver.: 3.16)
CPU: 1x Intel Xeon X3430 2.4GHz Quad
RAM: 2x 4GB Samsung DDR3-1600 ECC/Unbuffered STD
HDD: 2x Seagate Constellation ES.3 1TB SATA III
RAID: Software RAID
RAID type: RAID1
Chassis (H x W x D): 43mm x 426mm x 356mm (1U)
Chassis (H x W x D): 1,7" x 16,8" x 14,0" (1U)
Chassis: SuperChassis 512-200B
Weight: 7,7 kg / 17 lbs
Wattage IDLE: 50 Watt
Wattage LOAD: 243 Watt
System MTBF (h): 42216 hours
Electrical: 100 - 240V, 60-50Hz, 4 - 2 Amp
Operating temperature: 10°C to 35°C
Non-operating temperature: -40°C to 70°C
Humidity range: 8% to 90%
Non-operating humidity: 5% to 95%
Compliant to: CE, cCSAus, FCC, VCCI-A
© 2020 One Identity LLC. ALL RIGHTS RESERVED. Feedback Nutzungsbedingungen Datenschutz