Version: 4.2

DD Manager

DD Manager configuration

Once the DD1000i is installed and the required Local admin settings have been completed, the DD1000i can be administered using the two DD Manager web interfaces. There is one DD Manager setup on each section of the DD1000i.

A DD1000i is managed using the DD Manager, making sure data is sent correctly and unidirectionally from the source network to the destination network. This is achieved by configuring services to receive and transmit data on the respective networks. The services must be configured from both the source and destination network to ensure correct data transmission. Instructions on DD Manager actions and activities follow below.

Access DD Manager

To be able to access the DD Manager securely, a client certificate and CA certificate must be imported to the web browser. For more information about the certificates, see Certificates.

Connect to the DD Manager

Step 1Step 2

Step 1
Import a client and CA certificate to the web browser, see Certificates.
Step 2
Enter https://<admin_ip> in the web browser to connect to the DD Manager. The address is the <admin_ip> configured using Local admin.
- Default Upstream admin IP: 192.168.0.100
- Default Downstream admin IP: 192.168.0.101

System overview

When the Upstream or Downstream DD Manager is accessed, the Home page is displayed. In this view, the following is available:

Navigation bar - displays connected DD1000i section (Upstream or Downstream), DD Manager version, Home and Configuration menu selections, Settings icon and Help icon.
Service channel section - displays configured service channels and their current status (Started or Stopped). Clicking the Status indicator allows status to be changed.
System information section - displays Supported API and current Firmware version. Clicking the Upgrade button initiates the Firmware upgrade procedure. The System information section is also available when Settings is accessed.

Manage configurations

Both the Upstream and Downstream sections of the device must be configured in order to apply the necessary services enabling data transfer from the source to the destination network. The process for configuring the Upstream DD Engine is explained below. Remember to repeat the process for the Downstream DD Engine.

info

Services on Upstream and Downstream DD Engines must match and be started to properly receive and transmit data.

Configure the device

Step 1Step 2Step 3Step 4Step 5Step 6Step 7Step 8

Navigate to Configuration in the navigation bar.
The Device configuration page is now visible and Metadata and Features can be configured. Metadata consists of name and description, Features consist of, e.g. SNMP and remote logging. More information about the features and their configuration can be found in Monitoring.
note
The Name and Description fields each have a maximum allowed length of 255 characters.
In the sidebar, click Service channel 1. The Service channel configuration page is now displayed. The Service Channel Id's must correlate on the two Data Diode sections. The Id can be edited by clicking the pencil icon, .
Select an Upstream service from the leftmost Choose service... dropdown menu.
- The dropdown menu will show all available services.
- The latest version of the service will be selected automatically. If an older version is required, select it in the Version dropdown menu.
It is optional to configure the Downstream service. If configured, it will be saved but not applied to the Downstream DD Engine. To apply the service on Downstream DD Engine, the configuration must be applied from the Downstream DD Manager. To configure Downstream DD Engine on the Downstream DD Manager, select a Downstream service from the rightmost Choose service... dropdown menu.
- The dropdown menu will show all available services compatible with the selected Upstream service.
- The latest version of the service will be selected automatically. If an older version is required, select it in the Version dropdown menu.
Configure the service according to the input forms. Displayed parameters will vary depending on service. More information about the services can be found in Services.
(Optional) Add additional Service channels, click + Add in the left menu. Repeat steps 3-6 for each added Service channel.
When the correct parameters have been provided to all forms, click Submit to save the configuration and apply it to the selected device section.

info

When a DD1000i is configured, all its services enter stopped state. Services must be manually started as described in Start & Stop Services.

Download & Upload configuration

The DD1000i enables export and import of configuration files via the download and upload buttons in the DD Manager. The configuration file can be downloaded and uploaded as complete or partial configuration.

Download configuration

Download a configuration

Step 1Step 2Step 3

Click the download button.
Select which sides of the configuration that should be downloaded.
Confirm the selection by clicking Download.

Upload configuration

Upload a configuration:

Step 1Step 2Step 3Step 4

Click the upload button.
Click Browse and select a configuration .json file.
Click Upload and review the configuration.
In order for the uploaded configuration to be applied to device, click Submit.

Manage services

Start & Stop services

Start or stop a service

Step 1Step 2

Step 1
Navigate to Home in the navigation bar.
Step 2
Click on the current state for a service, Started or Stopped to be able to change state. Select Start or Stop from the dropdown menu to enable or disable traffic.

Add & delete services

In order to make services available for configuration, they must be uploaded using the DD Manager. Services can also be deleted in the DD Manager.

Add services

Add a service

Step 1Step 2Step 3Step 4Step 5

Click the Settings icon () in the navigation bar.
Click + Add in the Services section.
Click Browse and select the service .tar.gz files.
Click Submit and wait for the services to be uploaded.
Once the upload has completed, the services will be available in Configuration.

Delete services

Delete a service

Step 1Step 2Step 3Step 4Step 5

Click the Settings icon () in the navigation bar.
Click the Delete icon () in the Services section.
Select the services and versions to be deleted.
Click Submit and wait for the services to be deleted.
Once the deletion has completed, the services will no longer be available in Configuration.

Manage firmware

Firmware upgrade

When a new version of the DD1000i has been released, the new firmware can be retrieved by following the instructions in Downloads. Once the new firmware version has been downloaded, the upgrade is performed using the DD Manager.

info

Upstream and Downstream DD Engines should run the same firmware version.

Upgrade firmware

Step 1Step 2Step 3Step 4Step 5

Click the Settings icon () in the navigation bar.
Click Upgrade in the System information section.
Click Browse and select the firmware .raucb file.
Click Submit and wait for the firmware to be upgraded. This is expected to take some time (~5 min) and the connection to the server will be lost during the upgrade.
Once the upload has completed, the new firmware version will be visible in the System information section.

info

If the new firmware fails to start for any reason, the system will rollback to the old firmware. If this happens, it will be indicated in the System information section. Further details can be found in the device logs.

Reinstall firmware

The DD1000i is delivered with a preinstalled firmware. It is, however, possible to reinstall the entire firmware if needed. A bootable USB drive with minimum 12 GB is required to upload the firmware. The USB drive can be prepared using any Linux computer.

Firmware USB drive creation

Step 1Step 2Step 3Step 4

Download the latest version of the DD1000i installer (.iso.gz), see Downloads.
Decompress the .iso.gz file with the following command:
gunzip [PATH_TO_ISO.GZ_FILE]
This will delete the .iso.gz file and replace it with a .iso file.
Insert a USB drive and ensure that it is not mounted.

Run the following command:

dd if=[PATH_TO_DD1000i_INSTALLER_ISO_FILE] of=[PATH_TO_USB_DRIVE] status=progress conv=sync,sparse bs=4M && sync

warning

Running this command will delete all previous data on the USB drive.

Follow the steps below and repeat them for both the Downstream and Upstream sections of the DD1000i.

tip

The device boot order might require editing from the BIOS menu.

Reinstall firmware: Downstream

Step 1Step 2Step 3Step 4

Insert the USB drive into a USB port on the DD1000i Downstream section and start the device. The device must be booted from the USB drive.
Once the DD1000i Installer menu appears, select Install DD1000i Downstream followed by Select Installation Disk and Confirm.
Once prompted to enter a default password, enter a password with at least 8 characters. Repeat the password and Confirm.
Once the installation is completed, select Reboot in the menu followed by Confirm.

Reinstall firmware: Upstream

Step 5Step 6Step 7Step 8

Insert the USB drive into a USB port on the DD1000i Upstream section and start the device. The device must be booted from the USB drive.
Once the DD1000i Installer menu appears, select Install DD1000i Upstream followed by Select Installation Disk and Confirm.
Once prompted to enter a default password, enter a password with at least 8 characters. Repeat the password and Confirm.
Once the installation is completed, select Reboot in the menu followed by Confirm.

DD Manager configuration​

Access DD Manager​

System overview​

Manage configurations​

Download & Upload configuration​

Download configuration​

Upload configuration​

Manage services​

Start & Stop services​

Add & delete services​

Add services​

Delete services​

Manage firmware​

Firmware upgrade​

Reinstall firmware​

DD Manager configuration

Access DD Manager

System overview

Manage configurations

Download & Upload configuration

Download configuration

Upload configuration

Manage services

Start & Stop services

Add & delete services

Add services

Delete services

Manage firmware

Firmware upgrade

Reinstall firmware