Cato Networks Knowledge Base

Working with X1500 and X1700 Socket Sites

  • Updated

Overview of the Socket X1500 Window

For sites that have an X1500 Socket, the Socket X1500 Configuration window lets you configure the port settings for the Socket.

The following features are supported only for Socket versions 5.0.0 or higher:

  • BGP

  • Use of USB1/USB2 ports

  • Modifying the WAN Role

The firmware version for the Socket is displayed at the top of the Configuration panel for a site. If you need help upgrading your Socket, contact Support.

After creating a site with a Socket X1500 connection type, the destinations for each port are configured as follows (there are different ports for different Socket models):

  • USB2 - Disabled

  • USB1 - Disabled

  • LAN1 / port 1- enabled as LAN (cannot be changed)

  • LAN2 / port 2 - Disabled

  • WAN1 / port 3 (WAN) - enabled as Cato (Primary) (cannot be changed)

  • WAN2 / port 4 - Disabled or enabled as Cato, depending if you selected the Enable/Use WAN2 check box in the Add Site window

Note

Note: To make sure that the Sockets upgrade correctly, please review the information in Connectivity Requirements for Socket Upgrades.

Supported X1500 Socket Throughput

X1500 - 500 Mbps total bandwidth towards Cato, off-cloud and local routing altogether both upstream and downstream and can be used unsymmetrical, i.e 400 downstream/100 upstream.

The X1500 Socket supports up to 500 Mbps of total bandwidth for all transports and combined upstream and downstream. Sample X1500 Socket site configurations:

  • 400 Mbps downstream and 100 Mbps upstream for WAN traffic

  • WAN traffic - 300 Mbps downstream, 100 Mbps upstream and MPLS (Off-Cloud) 50 Mbps downstream, 50 Mbps upstream

Overview of the Socket X1700 Window

Your socket may also include add-ons which are hardware cards with additional network interfaces that are inserted into the Socket X1700 expansion slots. Configure these add-on interfaces as you configure other interfaces.

  • Add-ons are usually pre-ordered and installed by Cato Networks Ltd.

  • Before you insert add-ons in the expansion slot, turn off the Socket and disconnect the power supply.

After creating a site with a Socket X1700 connection type, the destinations for each port are configured as follows:

  • 1 - enabled as WAN 1

  • 2 - disabled or enabled as WAN 2, depending if you selected the Enable/Use WAN2 option in the Add Site window

  • 3 - enabled as LAN

  • The remaining ports are disabled

Note

Note: For the X1700 Socket, port 1 must have connectivity to the Cato Cloud to correctly update to new Socket versions. See Connectivity Requirements for Socket Upgrades.

Configuring Add-ons for the X1700 Socket

The default setting for the Add-on option is None. If the configured add-on in the Cato Management Application and the actual hardware don't match, then the add-on interface is treated as if it was physically disconnected.

To configure the add-on for the X1700 Socket:

  1. From the navigation menu, click Network > Sites and select the site.

  2. From the navigation menu, select Site Configuration > Socket.

  3. From the Add-on drop-down menu, select the add-on for the Socket.

    X1700_Socket_Addon.png
  4. Click Save.

Opening the Socket WebUI

To open the Socket WebUI, from the Actions drop-down menu, select Connect to Socket. The Socket WebUI opens in a new browser tab and automatically logs in. For more information see .

Configuring Socket Link Settings

This section explains how to configure settings for links that connect to the Cato Cloud and for MPLS Alternative WAN links. It also discusses how to configure failover and fallback settings for sites that have more than one link to the Cato Cloud.

Configuring the X1500 and X1700 Socket Interface Destinations

Use the Destination setting for a Socket interface to define where the Socket sends traffic to. These are the destination options:

  • LAN - internal network for a site

  • Alternative WAN (Layer-2) - MPLS network with Socket sites on the same subnet

  • Disabled - this interface doesn't send or receive traffic

  • Alternative WAN - MPLS network with Socket sites on different subnets

  • Cato - this interface connects to the Cato cloud

You can't change the destination for these interfaces: LAN1 (LAN) and WAN1 (Cato).

To configure the destination for a Socket interface:

  1. From the navigation menu, click Network > Sites and select the site.

  2. From the navigation menu, select Site Configuration > Socket.

  3. From the table, click the interface.

    The Edit Socket Interface panel opens.

  4. Enter the Name that identifies the interface in the Cato Management Application.

  5. From the Destination drop-down menu, select the destination for this interface.

  6. Click Apply. The new destination is added to the row for this interface.

  7. Click Save.

Configuring Links to Cato Cloud

Configure the link settings that connect the site to the Cato Cloud. This section is for links that use the Cato destination.

Interface WAN Roles

You can use network rules to prioritize the network traffic transport according to the WAN role. For example, you can define the WAN 1 role as the primary interface and the WAN 2 role as the secondary interface for a network rule.

You must define a WAN Role for all Cato destinations, and you can't use the same WAN Role for multiple interfaces.

Interface Precedences

The Precedence for a link used for failover and fallback settings determines the priority in which these links are used. Precedence 1 interfaces are active by default, and the Socket activates the other precedences if there are connectivity or performance issues with the higher precedence.

Configure the bandwidth for the site according to the terms of your Cato license.

To configure the settings for a Cato Cloud link:

  1. From the navigation menu, click Network > Sites and select the site.

  2. From the navigation menu, select Site Configuration > Socket.

  3. From the table, click the interface.

    The Edit Socket Interface panel opens.

  4. Select the WAN Role for this interface, based on the requirements of your network rules.

  5. Select the Precedence priority for the interface.

  6. Configure the maximum Bandwidth settings for all traffic in the site.

    Note

    Note: If you enter Upstream or Downstream values that are greater than the actual connection speed of your ISPs link, the Cato Cloud QoS engine can't manage the traffic.

  7. Click Apply. The Edit Socket Interface panel closes.

  8. Click Save.

Configuring Links for Alternate WAN Destinations

Configure the WAN interface settings for Alternate WAN and Alternate WAN (Layer-2) MPLS traffic destinations. Generally, private IPs and interfaces are used for connecting directly to the MPLS provider.

To configure the settings for an Alternative WAN link:

  1. From the navigation menu, click Network > Sites and select the site.

  2. From the navigation menu, select Site Configuration > Socket.

  3. From the table, click the interface.

    The Edit Socket Interface panel opens.

  4. Verify that the Destination is Alternate WAN and Alternate WAN (Layer-2).

  5. Configure the maximum Bandwidth settings for all traffic in the site.

    Note

    Note: If you enter Upstream or Downstream values that are greater than the actual connection speed of your ISPs link, the Cato Cloud QoS engine can't manage the traffic.

  6. Configure these settings for the Private or Public Alternative WAN networks.

    1. Interface IP - IP address for the Socket interface for the traffic

    2. Gateway - IP address for the Alternative WAN gateway (such as MPLS firewall or router)

    3. Network - IP range (with CIDR) for the LAN

    4. ID (VLAN) - Enter the VLAN tag for the interface

  7. Click Apply. The Edit Socket Interface panel closes.

  8. Click Save.

Migrating from X1500 Socket to X1700 Socket

Changing the Connection Type

If you change an existing Connection Type, the current configuration settings are automatically migrated to the new Connection Type for the following operations ONLY:

  • Socket X1500 to Socket X1700

  • Any IPsec (IKEv1 or IKEv2) to any Socket or vSocket

Any other Connection Type changes will delete the entire configuration for the site.

Note

Note: Migration operations cannot be undone.

Was this article helpful?

0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.