Configure external HSM network connection

This page describes how to set up the network for the external HSM connection.

Connect the external HSM

  1. Connect one of the ethernet ports on the HSM device to port number 11 on the TOR switch. This is a 10G port. Use the following optic and fiber cable:

    • Optic type: 10GBASE - SR
    • Fiber type: Multimode fiber

Configure the HSM specs

  1. Configure the following IP on the port on HSM device:

    • IP address: 198.18.2.20
    • Subnet mask: 255.255.255.0
  2. The default gateway for the HSM device should be set at 192.168.2.1.

Configure the TOR switch

SSH in to the TOR switch

  1. Get the password. Run the following command on the root-admin-node (BM03):

    release/gdcloud system network troubleshoot list --switch-login-info --kubeconfig /root/release/root-admin/root-admin-kubeconfig
    
  2. Connect a laptop to the uplink management port (port 10) on the switch. As this port is an access port, there is no need to set VLAN tags.

  3. Establish a Secure Shell (SSH) session to the TOR by entering ssh admin@198.18.0.1.

Configure the switch ports

  1. Go to the configuration mode as follows:

    switch [standalone: master] > enable
    switch [standalone: master] # configure terminal
    switch [standalone: master] (config) #
    
  2. Enter the following configuration:

    switch [standalone: master] (config) # interface ethernet 1/11 switchport access vlan 100
    
  3. Save the configuration:

    switch [standalone: master] (config) # write memory