This is documentation for Knowledge Base 4.0.0, which is no longer actively maintained.
For up-to-date documentation, see the latest version (4.1.0).
Version: 4.0.0
Configure
Once the DD1000i hardware is installed (Setup) and the required settings are set (Local Admin), the DD1000i can be administered via the two DD Managers. There is one DD Manager setup on each side of the Data Diode.
A DD1000i is managed using the DD Manager, making sure data is sent correctly and unidirectionally from the source network to the destination network. This is achieved by configuring services to transmit and receive data on the respective networks. The services must be configured from both the source and destination network to ensure correct data transmission. Instructions on DD Manager actions and activities follow below.
To be able to access the DD Manager securely, a client certificate and CA certificate must be imported to the web browser. For more information about the certificates, see Certificates.
Connect to the DD Manager
Step 1Step 2
Step 1
Import a client and CA certificate to the web browser, see Certificates.
Step 2
Enter https://<admin_ip> in the web browser to connect to the DD Manager. The address is your <admin_ip> configured in Local Admin.
Default Upstream admin IP: 192.168.0.100
Default Downstream admin IP: 192.168.0.101
tip
"https" must often be explicitly entered in the address bar.
The system overview is presented on the Home page, available in the navigation bar. This is where configured service channels are visible, can be started and stopped, and the system information can be viewed.
A device must be configured in order to apply the necessary services enabling data transfer from the source to the destination network. The device must be configured from both the source and destination network. The process for configuring DDE Upstream is explained below. Remember to repeat the process on the destination side, configuring DDE Downstream.
info
Services on Upstream and Downstream must match and be started to properly transmitt and receive data.
Configure the device
Step 1Step 2Step 3Step 4Step 5Step 6Step 7Step 8
Navigate to Configuration in the navigation bar.
The Device configuration page is now visible and Metadata and Features can be configured. Metadata consists of name and description, Features consists of, e.g. SNMP and remote logging. More information about the Features and their configuration can be found in Features.
In the sidebar, click Service channel 1. The Service channel configuration page is now displayed. The Service Channel Id's must correlate on the two Data Diode sides. The Id can be edited by clicking the pencil-icon, .
Select an Upstream service from the leftmost Choose service... dropdown menu.
The dropdown menu will show all available services.
The latest version of the service will be selected automatically. If an older version is required, select it in the Version dropdown menu.
It is optional to configure the Downstream service. If configured it will be saved but not applied to the DDE Downstream. To apply the service on DDE Downstream, the configuration must be applied from the Downstream DD Manager. To configure DDE Downstream, on the Downstream DD Manager select a Downstream service from the rightmost Choose service... dropdown menu.
The dropdown menu will show all available services compatible with the selected Upstream service.
The latest version of the service will be selected automatically. If an older version is required, select it in the Version dropdown menu.
Configure the service according to the input forms. Displayed parameters will vary depending on service. More information about the services can be found in Services.
(Optional) Add additional Service channels, click + Add in the left menu. Repeat steps 3-6 for each added Service channel.
When the correct parameters have been provided to all forms, click Submit to save the configuration and apply it to the selected device side.
info
When a device is configured, all its services enter state stopped. Services must be manually started which is described in Start & Stop Services.
The DD1000i enables export and import of configuration files via the download and upload buttons in the DD Manager. The configuration file can be downloaded and uploaded as complete or partial configuration.
Click on the current state for a service, Started or Stopped to be able to change state. Select Start or Stop from the dropdown menu to enable or disable traffic.
When a new version of the DD1000i has been released, the new firmware can be retrieved by following the instructions in Downloads. Once the new firmware version has been downloaded, the upgrade can be initiated from the DD Manager.DDE Upstream and DDE Downstream should run the same firmware version.
Upgrade firmware
Step 1Step 2Step 3Step 4Step 5
Click the gear icon, in the navigation bar.
Click Upgrade in the System information card.
Click Browse and select the firmware .raucb file.
Click Submit and wait for the firmware to be upgraded. This is expected to take some time (~5 min) and the connection to the server will be lost during the upgrade.
Once the upload has finished, the new firmware version will be visible in the System information card.
info
If the new firmware fails to start for any reason, it will rollback to the old firmware. When this happens it will be indicated in the System information card, further details can be found in the device logs.