User Guide: AMF Security version 2.4.0 for VST-APL

# Starting Configuration

Preparing for Configuration
Supported Web Browsers
Initial setting of AMF Security
Logging In to the Management Web Interface
Setting the timezone
Installing Licenses
About AMF Security software version 1.8.1 License
About display of license
About the validity period of the license
Installation of renewal license
About license expiration check
About reissue of license

## Preparing for Configuration

To use AMF Security, you need to set the initial settings of the AMF Security application in the Web GUI of AT-VST-APL. For the installation and setting of AT-VST-APL, refer to the AT-VST-APL document posted on our website.

## Supported Web Browsers

You can configure AMF Security through its web-based management interface.
Make sure that your management PC has one of the following web browsers installed:

- Microsoft Edge
- Google Chrome

> Note

> > Use the latest released version.

> Note

> > Microsoft Edge is based on Chromium.
> > Also, Internet Explorer mode is not supported.

## Initial setting of AMF Security

In the initial state of AT-VST-APL, the application instance of AMF Security is not set. Login to AT-VST-APL's management web interface and set the application instance of AMF Security.
For more information, refer to the AT-VST-APL document posted on our website.

## Logging In to the Management Web Interface

You can configure AMF Security through its web-based management interface.

1. Use one of the following methods to log in to the AMF Security setting screen.
   - Start a web browser and enter the IP Address set for AMF Security.
     The IP Address is explained using 192.168.1.10.

         https://192.168.1.10

     > Note

     > > Communication between the web browser and AMF Security is over HTTPS.

   - On the Dashboard page of AT-VST-APL, click the "Open" button in the AMF-Sec-app section.

   - On the AMF Security management page of AT-VST-APL, click the "Open" button.

2. The following login screen is displayed. Enter the default Account Name and Password and click the "Login" button.
   Entered password is masked with bullets on the screen.

   > Note

   > > The default Account Name is "manager" and the Password is "friend".

   > Note

   > > If a security warning screen appears, follow the onscreen instructions to continue browsing the site.
   > > If you have a SSL server certificate issued by a trusted certification authority (CA), you can install the certificate on the Network Settings > System Information page's or the AMF > AMF Application Proxy Settings page's "SSL Certificate" section after logging in to the AMF Security.

3. After logging in, the Device > Active Device List page is displayed.

   > Note

   > > A login session times out after 10 minutes of inactivity. The Login screen reappears when you perform any operation after the previous session has timed out.
   > > If you check "Remember this login" on the login screen, you remain logged in.

## Setting the timezone

AMF Security gets and uses the system time of AT-VST-APL, but it does not get the timezone setting. Therefore, for example, to use Japan time (JST: 9 hours ahead of Coordinated Universal Time (UTC)), set according to the following procedure:

> Note

> > If you change the time zone setting, AMF Security restarts, but after that, you need to restart (stop and start) the AMF Security application on the AT-VST-APL setting page for the setting to take effect. For more information, refer to the AT-VST-APL document posted on our website.
> > After that, the timezone setting is retained.

1. Click the "System Settings" menu, then click the "Date / Time Settings" submenu.

2. The System Settings > Date / Time Settings page is displayed. Click the "Edit" button in the Timezone item.

3. The Select Timezone dialog is displayed. Select the "Asia/Tokyo" from the drop-down list and click the "Submit" button.

4. AMF Security restarts and the login screen is displayed again.

5. After logging in, the System Settings > Date / Time Settings page is displayed.

Timezone setting is complete.

## Installing Licenses

You have to install proper licenses before you start using AMF Security.
There are two types of licenses: "Base" and "Addon".

- You always need the Base license to run AMF Security.
  OpenFlow and AMF Application Proxy do not work until the base license is installed.
- The Addon license is for adding an OpenFlow switch. AMF Application Proxy works with a Base license only, no Addon license for nodes is required.
  Although you can install Addon licenses before installing the Base license, AMF Security does not work until the Base license is installed.

> Note

> > If you do not have a license file, contact our sales engineer.
> > To obtain the license file, you need the AMF Security serial number displayed on the System Settings > System Information page.

> Note

> > Purchase a license to use OpenFlow.

To install the license, follow the steps:

1. On the System Settings > Date / Time Settings page, check that the current date and time and timezone are correct.
2. Click the "License page" in the message displayed at the top of the setting screen.

3. The System Settings > License page is displayed. Click the "Add" button.

4. The License Installation dialog is displayed. Click the "Choose File" button to select the license file, then click the "Submit" button.

5. Click the "OK" button.

6. If the "Name" and "Expiration Date" of the registered license are displayed on the System Settings > License page, the installation is successful.

   > Note

   > > Licenses before the expiration date start date and time are displayed as "Before Contact Period" in "Status".
   > > If the installed license is within the expiration date but the "Status" is not "Available", click the "Update" button.

License installation is complete. You can use AMF Security.

#### About AMF Security software version 1.8.1 License

After updating from AMF Security software version 1.8.1 to this version, you can continue to use the applied license key within the usable period.

> Note

> > In this version, the conventional license key cannot be newly applied.

#### About display of license

The licenses displayed on the System Settings > License page differ depending on the type of license.
The following is a display example for each license type.

- License inherited from AMF Security software version 1.8.1

- License for AMF Application Proxy

- License for OpenFlow

  > Note

  > > The basic license (50IP) for OpenFlow is divided into "BASE" with the number of switches "10" and "ADD" with the number of switches "40".
  > > The above screen is an example of adding the basic license for OpenFlow and the number of switches "450" as an additional license.

#### About the validity period of the license

The license for this product has a valid period.
A log of expiration warning messages is displayed 28 days, 21 days, 14 days, 7 days, and 1 day before the expiration date of the license installed with this version.

> Note

> > You can send an expiration warning message by email by making the following settings on the System Settings > Email Notification Settings page.
> > ・Check the "Enable Email Notification" checkbox
> > ・SMTP Server Settings

> Note

> > The basic license expiration warning message for OpenFlow is logged as "BASE" and "ADD" respectively, along with the license display. Also, if you have set Email Notification Settings, emails are also be sent.

After the license expires, both OpenFlow and AMF Application Proxy are disabled and a message is displayed at the top of the settings screen.
Also, the license is not be displayed on the System Settings > License page.
Reinstalling the license automatically enables those features.
Even if you install the renewal license, the warning message of the expiration date of the currently active license is displayed.

> Note

> > Also, if you have set Email Notification Settings, emails are also be sent.

#### Installation of renewal license

If you install the renewal license before the license end date and time, the previous license and the renewal license are displayed on the System Settings > License page.
Licenses before the expiration date start date and time are displayed as "Before Contact Period" in "Status".

> Note

> > The expiration date display is a sample for explanation.

If the expiration date continues as described above, OpenFlow and AMF Application Proxy can be used continuously without being stopped.

> Note

> > If the previous license and the renewal license are as follows, the connection between the connected OpenFlow switch and the AMF Master is temporarily disconnected when the license is switched.
> > ・License type changed (Example: AMF Application Proxy license → OpenFlow license)
> > ・Maximum number of OpenFlow Switches connected at the same time has changed

#### About license expiration check

The license expiration check is performed from AMF Security system time 00:00:00 to 00:05:59.
If the installed license is within the expiration date but the "Status" is not "Available", click the "Update" button on the System Settings > License page.

#### About reissue of license

The issued license is tied to the AMF Security serial number.
In the following cases, the AMF Security serial number has changed and the issued license cannot be used and must be reissued. Make a note of the serial number displayed on the System Settings > System Information page and contact our sales engineer.

- After updating from AMF Security software version 1.8.1 to this version, remove and reinstall this version of AMF Security on AT-VST-APL
- Remove the AMF Security application on AT-VST-APL and install the AMF Security application again
- Restore (migrate) the AMF Security application to AT-VST-APL in another chassis

29 Sep 2022 09:15