Configuring and activating an accessible DTI server address using the CLI

Use the CLI commands in this section to configure a custom DTI address, and activate it as an accessible DTI server address for managed Malware Analysis appliances using the dual-port address type.

Important

Do not use this procedure for any reason other than the scenario described in Changing the address type for DTI network service requests .

You must enter the commands in the order shown.

Note

This configuration must be performed on each managed appliance. You can repeat the procedure on each appliance, or use appliance group functionality to configure the accessible address on multiple appliances at the same time.

Only one custom DTI address can be configured.

To configure the custom address:

Go to CLI configuration mode:

appl-hostname > enable
appl-hostname # configure terminal

Configure the accessible address for the DTI source:
1. Prevent the local address from overriding the accessible address:
```
appl-hostname (config) # no fenet dti source override enable
```
2. Configure the IP address and port:
```
appl-hostname (config) # fenet dti source type <name> address <ipAddress> [port <port>]
```
  where name is a name of your choice and ipAddress is the NAT IPv4 or IPv6 address. The port parameter is optional and defaults to 443 if it is not specified.
3. Specify the DTI server user and password:
```
appl-hostname (config) # fenet dti source type <name> username <username> password <password>
```
4. Set CUSTOM as the default DTI source type:
```
appl-hostname (config) # fenet dti source default <name>
```
Configure the accessible address for the DTI upload destination:
1. Prevent the local address from overriding the accessible address:
```
appl-hostname (config) # no fenet dti upload destination override enable
```
2. Configure the address and port:
```
appl-hostname (config) # fenet dti upload destination type <name> address <ipAddress> [port <port>]
```
  where name is a name of your choice and ipAddress is the NAT gateway IPv4 or IPv6 address. The port parameter is optional and defaults to 443 if it is not specified.
3. Specify the DTI server user and password:
```
appl-hostname (config) # fenet dti upload destination type <name> username <username> password <password>
```
4. Set CUSTOM as the default DTI upload destination type:
```
appl-hostname (config) # fenet dti upload destination default <name>
```
Configure the accessible address for the enrollment, faude, mil, helix, or virtual service:
1. Prevent the local address from overriding the accessible address:
```
appl-hostname (config) # no fenet dti <service> service override enable
```
2. Configure the address and port:
```
appl-hostname (config) # fenet dti <service> service type <name> address <ipAddress> [port <port>]
```
  where name is a name of your choice and ipAddress is the virtual NAT IPv4 address or IPv6 address. The port parameter is optional and defaults to 443 if it is not specified.
3. Specify the DTI server user and password:
```
appl-hostname (config) # fenet dti <service> service type <name> username <username> password <password>
```
4. Set CUSTOM as the default DTI service type:
```
appl-hostname (config) # fenet dti mil service default <name>
```
Verify the configuration:
```
appl-hostname (config) # show fenet
```
Save your changes.
```
appl-hostname (config) # write memory
```

Deleting the custom DTI source

You can delete the custom DTI source, which removes it from the list of available options.

Note

You cannot delete the custom DTI source if it is an active DTI source for managed appliances.

To delete the custom DTI source:

Go to CLI configuration mode:

appl-hostname > enable
appl-hostname # configure terminal

Delete the custom DTI source:

appl-hostname (config) # no fenet dti source type <name>

Verify your changes:

appl-hostname (config) # show fenet dti configuration

Save your changes:
```
appl-hostname (config) # write memory
```

Example

The following example configures a custom address named "CUSTOM" and prevents the Central Management System appliance from overriding it with the Central Management System local address.

appl-hostname (config) # no fenet dti source override enable
appl-hostname (config) # fenet dti source type CUSTOM address 10.3.3.5 port 2000
appl-hostname (config) # fenet dti source type CUSTOM username user8 password 123ABCXYZ
appl-hostname (config) # fenet dti source default CUSTOM
appl-hostname (config) # no fenet dti upload destination override enable
appl-hostname (config) # fenet dti upload destination type CUSTOM address 3.3.3.5 port 2000
appl-hostname (config) # fenet dti upload destination type CUSTOM username user8 password 123ABCXYZ
appl-hostname (config) # fenet dti upload destination default CUSTOM
...

appl-hostname (config) # show fenet
DTI CLIENT CONFIGURATION:
  Download source    :  CUSTOM (user8@10.3.3.5)
  Upload destination :  CUSTOM (user8@10.3.3.5) 
  Update channel     :  CUSTOM (user8@10.3.3.5)  
  Http proxy         :  None
  Connect timeout    :  30 (max tries: 3)
  Speed Time         :  60
  Max Time           :  14400
  Rate Limit         :  None
  Lockdown enabled   :  No
  SSL minimum version:  tls1
  SSL cipher list    :  compatible