FAQ（ECL1.0）

Integrated Network Appliance - FAQ

• All(25)

• For Integrated Network Appliance(INA), can we group IP addresses or protocols, and configure it as a Firewall filtering rule?Integrated Network Appliance

  No, you cannot group them and set them as filtering rules.

  Open in a new window
• How long would the connectivity interruption be, if incidents occur in Integrated Network Compliance?Integrated Network Appliance

  If you selected redundant plan, hot standby will be provided and switch the network in approximately 30 seconds. Even when single plan is selected, infrastructure side is redundant; therefore network will be switch in approximately 5-10 minutes.
  *Time takes will be different according to type of incidents and infrastructure architecture.

  Open in a new window
• I configured IPsec termination on Integrated Network Appliance(INA) but the connection has not established correctly. Can I have actual configuration?Integrated Network Appliance

  We don't provide customer support for actual configuration of INA nor troubleshooting for the connection. For supported device, please refer to "Functional Description".
  Thanks for your kind understanding.

  Open in a new window
• Please tell me the pre-set default parameters of IPsec functionality on Integrated Network Appliance(INA).Integrated Network Appliance

  For the default parameters of IPsec, please refer to "Enterprise Cloud Functional Description".
  (It might be changed without notification.)

  Open in a new window
• Does Active mode is supported on the IPsec functionality on Integrated Network Appliance(INA)?Integrated Network Appliance

  No, Active mode is not supported. Peer IP must be the static IP, which can be reachable from INA.

  Open in a new window
• For Integrated Network Appliance, we are planning on setting IPsec connection termination. IPsec addresses are duplicated between sites but if duplication is occurring in Peer Network, could we terminate IPsec tunnel?Integrated Network Appliance

  IPsec tunnel connection termination cannot be set if addresses are duplicated in Peer Network.

  Open in a new window
• What kind of load distribution method can be applied to load balancing of Integrated Network Appliance?Integrated Network Appliance

  Load distribution methods are as follows;

  • Round Robin (give numbers to each member in an order)
  • Hash
  • Last Connection
  • URL

  Open in a new window
• In order to set the Static route on the Integrated Network Appliance(INA) on the VPN transit interface towards to the server segment, error has shown up as "Duplicate on the specific Network" and unable to configure.Integrated Network Appliance

  INA could not set static routing which is duplicate or overlap to the server segment. Also below address block is prohibit to set the static routing on INA.

  • The Global IP that customer has purchased.
  • The IP address block for VPN transit.
  • The IP address block, which is prohibited to assign, is described in the Service Spec documentation's Server segment chapter.

  Open in a new window
• Firewall cannot be set appropriately with Integrated Network Appliance. Could you provide logs?Integrated Network Appliance

  We are afraid we do not provide logs. Please note that we do not acquire logs of filtering and other settings for Integrated Network Appliance.

  Open in a new window
• How many filter rules, SNAT, and DNAT rules can we setup in Integrated Network Appliance(INA)?Integrated Network Appliance

  For the INA, the following number of rules can be set regardless of the plan.

  Firewall rule: Approximately 100 rules(including Global Rules)
  SNAT/DNAT rule: Approximately 100 rules (including Global Rules and SNAT rule and DNAT rule)

  Open in a new window