This article describes these features that help you manage Cato Sockets that are configured for your account:
-
Use the Cato Management Application Socket page (or Socket WebUI) to manage a Socket from one site, and then reassign it to a different one
-
Changing the Socket password from the Socket WebUI
-
Understanding Socket WebUI Certificates
-
-
Using the Socket reset button to:
-
Reset the Socket password
-
Unassign the Socket from the site
-
You can use the Socket screen to manage your Sockets for a site, and it shows a detailed overview of each Socket's ports and their state. You can also enable and disable ports.
it is possible to assign and unassign Sockets for a site via this page. After you unassign a Socket, it is automatically reset to factory default settings. When you assign a Socket to a site, the Cato Management Application pushes the settings to the Socket and overwrites any manual configurations.
To unassign a Socket from a site:
-
From the navigation menu, click Network > Sites, and select the site with the Socket you are unassigning.
-
From the navigation menu, click Site Settings > Socket.
-
From the Actions menu of the site you are unassigning, select Unassign.
A warning window opens.
-
Click OK.
The Socket is unassigned from the site. The account receives a new Notification to activate a new Socket.
To assign a socket to a site:
-
Click the notification icon
.
-
In the Notifications panel, click Activate New Socket.
The message shows the serial number (S/N) for each available Socket.
-
Click Accept.
The Assign Socket to a Site window opens.
-
From the drop-down menu select the site for the Socket.
Note
Note: If No Results appears in the window, click Cancel and make sure you selected the right Socket type in the Connection Type field for the site.
-
Click Continue.
The Socket is added to the site.
In some scenarios, switching the HA roles assigned to your Sockets might be necessary. For example, if your secondary Socket has better throughput than the primary.
Note
Note: Cato recommends manually switching the HA role during a maintenance window or during off-hours as this process will have some minimal downtime.
To manually switch the HA role:
-
Unassign the primary Socket using the procedure above. This triggers a switch to the secondary Socket, which becomes the primary.
-
Reassign the Socket to the site. It will now receive the role of secondary Socket.
Socket WebUI certificates have a TTL (Time to Live) of 300 days. When a Socket is started, rebooted, or upgraded, Cato checks when the Socket WebUI’s certificate is due to expire. If the certificate is set to expire within 90 days, a new certificate is generated. Meaning, if you have not upgraded or rebooted your Socket in the last 210 days, you will be issued a new certificate.
Therefore if you wish to update the certificate outside of the account upgrade window, reboot the Socket. Take into account that rebooting the Socket will cause some temporary downtime of your network, while the Socket reboots and reconnects to the PoP.
Note
Note: In a HA pair, if you wish to reboot the Sockets, Cato recommends rebooting the Secondary socket first, and then rebooting the Primary. This would mean that on failover to the Secondary, it will be updated with the new certificate, while the Primary updates with the new certificate.
There are some situations where after using the Cato Management Application to unassign a Socket, you can't then assign the same Socket to a different site. For example, if the Socket was disconnected from the Cato Cloud before clicking Unassign. In this case, use the Socket WebUI to unassign the Socket and reset the Socket settings, and then you can use the Cato Management Application to assign it to a different site. The Socket remains at the same hardware version.
Only use the Socket WebUI to unassign a Socket after performing the unassign procedure in the Cato Management Application (see above).
Supported from Socket v15 and higher.
To use the Socket WebUI to unassign a Socket:
-
Log in to the Socket WebUI locally, see Using the Socket WebUI.
-
From the Administrations tab, click Unassign.
You can change the password for the Socket from the Socket WebUI.
The password policy for Cato Sockets is that you must change the password every 90 days. After 90 days, the password expires and the login window for the Socket WebUI prompts you to authenticate and enter a new password. The new password can't be the same as the previous three passwords.
To change the Socket password from the Socket WebUI:
-
From the navigation menu, click Network > Sites and select the site.
-
From the navigation menu, click Site Configuration > Socket.
-
From the Actions menu of the socket, select Socket WebUI.
The browser opens a new tab and logs in to the Socket WebUI.
-
From the menu bar, select Administration.
-
In the Administrator Password section, enter the current and new password.
-
Click Confirm. The Socket password is changed.
You can use the Socket reset button to perform these actions on the physical Socket:
-
Reset the admin password to the factory default password (admin), which has no impact on the network traffic
-
Reset the Socket to the default settings
After physically resetting a Socket, if you want to re-assign it to a different site, unassign the Socket from the original site (see above Managing Cato Sockets for a Site).
You must have physical access to the Socket to perform these reset actions. Make sure to press and hold the reset button for the reset actions, instead of repeatedly pressing the button.
Note
Note: You need to use a paper clip and push the button inside the hole for the relevant Socket model. For more information about identifying the correct Socket model see, Overview of Reimaging Cato Sockets.
To reset the admin password on the Socket:
-
X1500 and X1500B Socket models - Press and hold the F/D button for about 10 seconds. The password is reset to the default value: admin.
-
X1600 and X1600 LTE Socket models - Press and hold the Reset/FD button for about 10 seconds. The password is reset to the default value: admin.
-
X1700 Socket models - Press and hold the FD button for about 10 seconds. The password is reset to the default value: admin.
-
X1700B Socket models - Press and hold the Reset/FD button for about 10 seconds. The password is reset to the default value: admin.
To unassign a Socket from the site:
Note
Note: The following should be used only if the Cato tunnel is unavailable and you can't access the Cato Management Application.
-
X1500 and X1500B Socket models - Press and hold the reset button for about 30 - 35 seconds. The Socket is reset to the default settings and the configurations are erased.
-
X1600 and X1600 LTE Socket models - Press and hold the Reset/FD button for about 30 - 35 seconds. The Socket is reset to the default settings and the configurations are erased.
-
X1700 Socket models - Press and hold the FD button for about 30 - 35 seconds. The Socket is reset to the default settings and the configurations are erased.
Pressing the Reset button powers on and off the Socket.
-
X1700B Socket models - Press and hold the Reset/FD button for about 30 - 35 seconds. The Socket is reset to the default settings and the configurations are erased.
13 comments
Added section for Unassigning a Socket Using the Socket WebUI
The F/D button on the X1700 also works now, I've tested this out and the admin password was reset.
Ryu Lekranty thanks for the comment.
I updated the section Resetting the Admin Password and Resetting a Socket to include information about the X1700 and X1700B Socket models.
The statement "Press and hold the Reset/FD button for 25 - 45 seconds." is logically meaningless unless there is a way to tell when the pressure may be released. Either just say 45 seconds or add "...until the LEDs are blinking in so-and-so way".
JM - Thanks for the comment, and excellent point.
I updated the article to say about 45 seconds.
Based on discussions with RnD and Support, we changed the time range for resetting the Socket to about 30 - 35 seconds.
This smaller time range is supported for all Socket versions (the larger time range is partially supported).
There is still a flaw in the logic there - how do I know whether I can let go of the button after 30 vs 35 seconds? Also, what does it mean that the «time range is partially supported»?
JM You can let go of the button between 30-35 seconds and then the Socket resets.
All Sockets support the 30-35 second time range, however only some Socket versions support the larger time range (up to 45 seconds)
Right, but in the absence of a timer at hand - what happens if I accidentally hold the button for more than 35 seconds? Or slightly less than 30? How can I tell whether the reset is sucessful?
@JM, for X1500, hold the reset button for 30sec, once you release it, the WAN and LAN leds will go off then you know for sure that the reset has been initiated.
@Cato, if i unassign a socket in CMA, the unassign option in Socket WebUI is not available anymore.
The below note is therefore not correct:
Note: Only unassign the Socket with the Socket WebUI after performing the unassign action using the Cato Management Application (shown above).
Said Abouelouyoune Excellent point! It is only necessary to use the unassign option in the Socket WebUI in specific situations, for example if the Socket was disconnected from the network before an admin clicked Unassign in the Cato Management Application. However, in these situations, you need to first unassign the Socket in the Cato Management Application, and then the Socket WebUI.
I updated the article to make it more clear when you need to use the Socket WebUI to unassign the Socket.
Hi,
why don't I see my socket on the Sockets Inventory page?
Why wasn't it associated with the account?
Francesco Pilittu Thanks for your comment about a Socket not showing up on the Sockets Inventory page. Please open a Support ticket for more help with this issue.
Please sign in to leave a comment.