Question & Answer
Question
How do you change the link speed and duplex settings on the management interfaces of the QRadar Network Security (XGS) appliance?
Cause
By default, the management interfaces on the XGS appliance are configured to use autonegotiate for speed and duplex settings.
Answer
Users who need to change the management interface link speed and duplex settings from the default values can use the instructions in this article to accomplish the task.
Important: The instructions in this article apply to the XGS management interfaces only. See the Configuring protection interfaces documentation for information on configuring XGS protection interfaces.
Management interface configuration parameters
The following parameters should be added to the Advanced Tuning Parameters policy on the XGS.
Notes:
Values:
Description: This parameter is used to disable auto-negotiation for the specified interface.
Name:
Values:
Description: This parameter is used to configure the link speed for the specified interface.
Name:
Values:
Description: This parameter is used to configure the link duplex for the specified interface.
Viewing management interface settings
You can view the current management interface settings from the command line by logging in to the appliance by using the admin account via SSH or console connection and entering the following command:
The command will output results similar to the following:
In this case, tuning parameters are set as below.
Name:
Values:
Name:
Values:
Name:
Values:
Important: The instructions in this article apply to the XGS management interfaces only. See the Configuring protection interfaces documentation for information on configuring XGS protection interfaces.
Management interface configuration parameters
The following parameters should be added to the Advanced Tuning Parameters policy on the XGS.
Notes:
- When used, all three of the following parameters must be present. If all three are not present, the link settings will default to autonegotiate.
- Use the term eth1 for the M.2 interface in the tuning parameters.
- This functionality is included by default in firmware 5.3.2.2 or higher. Users at firmware 5.3.2.1 must apply patch 5.3.2.1-ISS-XGS-All-Models-Hotfix-IF0001 in order to manually configure the link speed and duplex setting for the M.1 interface. Contact IBM Support to request this patch.
net.if.autoneg.eth1Values:
offDescription: This parameter is used to disable auto-negotiation for the specified interface.
Name:
net.if.speed.eth1Values:
10, 100, 1000Description: This parameter is used to configure the link speed for the specified interface.
Name:
net.if.duplex.eth1Values:
half, fullDescription: This parameter is used to configure the link duplex for the specified interface.
Viewing management interface settings
You can view the current management interface settings from the command line by logging in to the appliance by using the admin account via SSH or console connection and entering the following command:
management interfaces showThe command will output results similar to the following:
In this case, tuning parameters are set as below.
Name:
net.if.autoneg.eth1Values:
offName:
net.if.speed.eth1Values:
100Name:
net.if.duplex.eth1Values:
full
[{"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Hardware","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.4","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}},{"Product":{"code":"SSHLHV","label":"IBM Security Network Protection"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"Hardware","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.3.1;5.3.2;5.3.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
24 January 2021
UID
swg21964988