background image

Clavister NetWall W20B

Getting Started Guide

Clavister AB

Sjögatan 6J

SE-89160 Örnsköldsvik

SWEDEN

Head office/Sales: +46-(0)660-299200

Customer support: +46-(0)660-297755

www.clavister.com

Published 2019-04-03

Copyright

©

2019 Clavister AB

Summary of Contents for NetWall W20A

Page 1: ...ll W20B Getting Started Guide Clavister AB Sjögatan 6J SE 89160 Örnsköldsvik SWEDEN Head office Sales 46 0 660 299200 Customer support 46 0 660 297755 www clavister com Published 2019 04 03 Copyright 2019 Clavister AB ...

Page 2: ... Clavister reserves the right to revise this publication and to make changes from time to time in the content hereof without any obligation to notify any person or parties of such revision or changes Limitations of Liability UNDER NO CIRCUMSTANCES SHALL CLAVISTER OR ITS SUPPLIERS BE LIABLE FOR DAMAGES OF ANY CHARACTER E G DAMAGES FOR LOSS OF PROFIT SOFTWARE RESTORATION WORK STOPPAGE LOSS OF SAVED ...

Page 3: ...ement Computer Connection 24 3 5 Mini USB Console Port Connection 27 3 6 Connecting Power 29 4 cOS Core Configuration 32 4 1 Web Interface and Wizard Setup 32 4 2 Manual Web Interface Setup 42 4 3 Manual CLI Setup 56 4 4 License Installation Methods 64 4 5 Setup Troubleshooting 66 4 6 Going Further with cOS Core 68 5 Resetting to Factory Defaults 71 6 Warranty Service 74 7 Safety Precautions 76 A ...

Page 4: ... 9 1 2 Clavister W20B Connection Ports 11 1 3 W20B Interface Ports 11 3 1 The W20B Mini USB Local Console Port 27 3 2 Rear view of the Clavister W20B 29 3 3 W20B Power Switch and Power Inlet Socket 29 5 1 Factory Reset Using the Web Interface 72 4 ...

Page 5: ...d side of the page followed by a short paragraph in italicized text There are the following types of such sections Note This indicates some piece of information that is an addition to the preceding text It may concern something that is being emphasized or something that is not obvious or explicitly stated in the preceding text Tip This indicates a piece of non critical information that is useful t...

Page 6: ...http www clavister com Trademarks Certain names in this publication are the trademarks of their respective owners cOS Core is the trademark of Clavister AB Windows Windows XP Windows Vista Windows 7 Windows 8 and Windows 10 are either registered trademarks or trademarks of Microsoft Corporation in the United States and or other countries Apple Mac and Mac OS are trademarks of Apple Inc registered ...

Page 7: ...ns are not supported The supported cOS Core versions are as follows The W20A can run any cOS Core version from 10 22 01 onwards The W20B can run any cOS Core version from 12 00 03 onwards Earlier versions than those stated above are not supported and a downgrade should not be attempted W20B Differences The principal differences in the W20B when compared with the W20A are as follows The W20B status...

Page 8: ...tor for console connection The W20B factory reset button is located at a different position The W20B internal fan does not have a sensor and so this will not display in cOS Core s hardware monitoring feature Chapter 1 W20B Product Overview 8 ...

Page 9: ...OS Core support agreements These provide access to cOS Core updates and provide a hardware replacement service in the case of a hardware fault Without one of these agreements hardware warranty is limited to 2 years The warranty terms are described further in Chapter 6 Warranty Service along with a description of the hardware replacement procedure The Cold Standby Service To ensure maximum uptime a...

Page 10: ...quiries should be directed to the head office number 46 0 660 29 92 00 End of Life Treatment The W20B device is marked with the European Waste Electrical and Electronic Equipment WEEE directive symbol which is shown below The product and any of its parts should not be discarded using a regular refuse disposal method At end of life the product and parts should be given to an appropriate service tha...

Page 11: ...n Section 3 5 Mini USB Console Port Connection Note The two USB Type A ports are not currently used The two USB Type A ports on the W20B front panel are for future functionality and are not currently used by cOS Core All the Ethernet interface ports function independently of each other and are not connected by a switch fabric All are capable of link speed auto negotiation and can operate using 10B...

Page 12: ... i Orange when cOS Core is running normally Chapter 1 W20B Product Overview 12 ...

Page 13: ...e cOS Core management interfaces In addition log message alerts can be automatically generated if a sensor reaches a value outside of its normal operational range Configuring this feature as well as a list of all the sensors available on each Clavister hardware model and their normal ranges can be found in the Hardware Monitoring section of the separate cOS Core Administration Guide Chapter 1 W20B...

Page 14: ...Chapter 1 W20B Product Overview 14 ...

Page 15: ...wizard the wizard will provide a link to the registration page so it can be done while the wizard is running Registration of the W20B Hardware Unit This is mandatory for every hardware unit before a license can be downloaded It can be done in the following ways i Automatic registration after cOS Core starts This can done by the Setup Wizard which starts automatically in the Web Interface when cOS ...

Page 16: ...irst time click the Create Account link 3 The registration page is now presented The required information should be filled in In the example below a user called John Smith is registering 4 When the registration details are accepted an email is sent to the email address given so that the registration can be confirmed Chapter 2 Registering with Clavister 16 ...

Page 17: ...onfirmation link in the email leads back to the Clavister website to show that confirmation has been successful and logging in is now possible 7 After logging in the customer name is displayed with links for changing settings and logging out Chapter 2 Registering with Clavister 17 ...

Page 18: ...ration is required and this is done using the following steps 1 Log in to the Clavister website and select the Register License option 2 The registration page is displayed Under the tab Hardware Serial Number and Service Tag enter the Hardware Serial Number and Service Tag must be entered These two codes are found on a label which should be attached to the W20B hardware itself The label is usually...

Page 19: ...can be done automatically through the cOS Core Setup Wizard which is described in Section 4 1 Web Interface and Wizard Setup If the W20B is not connected to the Internet the license must be manually downloaded from the cOS Core website and then manually uploaded All license installation options are listed and discussed in Section 4 4 License Installation Methods Chapter 2 Registering with Claviste...

Page 20: ...ord supplied with the appliance to connect it to the power source Using Other Power Cords If your installation requires a different power cord than the one supplied with the appliance be sure to use a cord displaying the mark of the safety agency that defines the regulations for power cords in your country Such marks are an assurance that the cord is safe Power Overload Ensure that the appliance d...

Page 21: ...That is to say the temperature most commonly found in a modern office and in which humans feel comfortable This is usually considered to be between 20 and 25 degrees Celsius 68 to 77 degrees Fahrenheit Special rooms for computer equipment may use a lower range and this is also acceptable Airflow Make sure that airflow around the appliance is not restricted Dust Do not expose the appliance to envir...

Page 22: ...0B is designed to be rack mounted and installation on a flat surface is not recommended and should only be done for testing purposes Important Always leave space around the appliance Always ensure there is adequate space around the appliance for ventilation and access to operating switches and cable connectors No objects should be placed on top of the casing Chapter 3 W20B Installation 22 ...

Page 23: ...ch must be used for attaching the brackets After attaching a bracket to either side of the unit it is ready for rack mounting using a suitable fastener Rear support is not necessary Rack Mounting Guidelines The following mounting guidelines should be followed A rack or cabinet used for mounting should be adequately secured to prevent it from becoming unstable and or falling over Devices installed ...

Page 24: ...terface for cOS Core management When this interface is accessed for the first time a setup wizard runs automatically to guide a new user through key setup steps The wizard can be closed if the administrator wishes to go directly to the Web Interface to perform setup manually The wizard is recommended for its simplification of initial setup and is described in detail in Section 4 1 Web Interface an...

Page 25: ...the cOS Core setup wizard this is referred to as the WAN interface In this guide it is assumed that the G2 interface of the W20B is used for Internet connection although any other available interface could be used instead Direct Network Connection to the Firewall s Management Interface Connection to the default management interface G1 on the firewall from the management computer can be done direct...

Page 26: ...k However the IP chosen must be different from 192 168 1 1 which is used by cOS Core s default management interface The following appendices at the end of this guide describe how to set up the management computer IP with different operating systems Appendix C Windows 7 IP Setup Appendix D Windows 8 8 1 10 IP Setup Appendix E Apple Mac IP Setup Chapter 3 W20B Installation 26 ...

Page 27: ...nsole emulation software 3 After connection to a PC Windows will try to recognize the device and automatically install the appropriate driver through the Windows Update feature If Windows is unable to do this automatically the driver should be downloaded and installed manually For the Linux and MacOS micro USB drivers or to download the Windows driver manually go to the W20B product page which can...

Page 28: ...s recommended A local console password need not be set However if it is not anyone with physical access to the local console will have full administrator rights Unless the hardware is placed in a secure area it is therefore recommended to set a local console password This is done by entering the console boot menu at system startup by pressing any console key before cOS Core has fully started The b...

Page 29: ...r Inlet Socket 2 Plug the other end of the power cord into a grounded power outlet 3 Power is controlled by a rocker switch situated to the left of the power inlet socket To switch on depress the upper part of the switch so it moves to the On position 4 The W20B will boot up as soon as power is applied and cOS Core will start The progress of the boot up can be seen on a CLI console connected to th...

Page 30: ...B is protected from damage by sudden external electrical power surges through the power cable Surge protection is particularly important in locations where there is a heightened risk of lightning strikes and or power grid spikes Any surge protection unit should be installed exactly according to the manufacturer s instructions since correct installation of such units is vital for them to be effecti...

Page 31: ...Chapter 3 W20B Installation 31 ...

Page 32: ...ate cOS Core Administration Guide 4 1 Web Interface and Wizard Setup This section describes the setup when accessing cOS Core for the first time through a web browser The cOS Core user interface accessed in this way is called the Web Interface or WebUI It assumes that a physical network connection has been set up from a management computer to the default management Ethernet interface as described ...

Page 33: ...re the web browser doesn t have a proxy server configured for the cOS Core management IP address The cOS Core Self signed Certificate When responding to the first https request in a browser session cOS Core will send a self signed certificate to the browser All browsers will automatically flag this self signed certificate as posing a potential security risk In the latest Microsoft browser the foll...

Page 34: ...ould begin automatically as a popup window If the wizard is blocked by the browser it can be started manually by pressing the Setup Wizard button in the Web Interface toolbar shown below Once the wizard is started the first dialog displayed is the wizard welcome screen Canceling the Wizard The setup wizard can be canceled at any point before the final Activate screen It can run again by pressing t...

Page 35: ...Always doing this is recommended The admin username can also be changed if this is required The next screenshot shows this step The Enforce Strong Passwords option is only present in cOS Core versions 11 05 and later This is a global setting that will enforce the listed strong passwords rules for all users in any local user database in the configuration If required this option can be disabled late...

Page 36: ...Transparent mode interfaces can be configured at any time later outside of the wizard Note This step is only available with version 11 04 or later The step to optionally set up transparent mode interfaces in the startup wizard is only available with cOS Core version 11 04 or later Also the available interface list shown above will vary according to the platform on which cOS Core is running Chapter...

Page 37: ...nnection to the Internet will function It can be one of Manual configuration DHCP PPPoE or PPTP as shown below These four different connection options are discussed next in the subsections 5A to 5D that follow 5A Static manual configuration Information supplied by the ISP should be entered in the next wizard screen All fields need to be entered except for the Secondary DNS server field Chapter 4 c...

Page 38: ... ISP for PPPoE connection should be entered The Service field should be left blank unless the ISP supplies a value for it DNS servers are set automatically after connection with PPPoE 5D PPTP settings The username and password supplied by an ISP for PPTP connection should be entered If DHCP is to be used with the ISP then this should be selected otherwise Static should be selected followed by ente...

Page 39: ...a particular interface or configured later The range of IPv4 addresses that can be handed out must be specified in the form n n n n n n n n where n is a number between 0 and 255 and n n n n is a valid IPv4 address within a subnet local to the firewall For example the private IPv4 address range might be specified as 192 168 1 50 192 168 1 150 with a netmask of 255 255 255 0 Chapter 4 cOS Core Confi...

Page 40: ...ore By selecting the Clavister option the current time will be updated over the Internet from Clavister s own timeserver When specifying a hostname as a server instead of an IP address the hostname should be prefixed with the string dns For example the hostname host1 company com should be entered as dns host1 company com Wizard step 8 Activate setup The final step for the configuration is to save ...

Page 41: ...ack to this step Alternatively this step can be skipped and license installation can be done later in which case cOS Core will run in demo mode with a 2 hour time limit After the 2 hour period only management access will be allowed If a license is installed at this point the wizard will then ask if a reconfigure or restart operation should be performed To ensure that the W20B can make use of the f...

Page 42: ...S Core and although their physical capabilities may be different any interface can perform any logical function Setting the Date and Time Many cOS Core functions rely on an accurate date and time so it is important that this is set correctly To do this select System Device Date and Time The current system time is displayed and this can be changed by selecting the date and time fields then manually...

Page 43: ... select the Save and Activate option from the Configuration menu this procedure is also referred to as deploying a configuration A dialog is then presented to confirm that the new configuration is to become the running configuration After clicking OK cOS Core reconfiguration will take place and after a short delay the Web Interface will try and connect again to the firewall If no reconnection is d...

Page 44: ...log the user out If they log back in through the same web browser session then they will return to the point they were at before the logout occurred and no saved but not yet activated changes are lost Setting Up Internet Access Next we shall look at how to set up public Internet access with the CLI There are four options for setting up access which are listed below and then described in detail A S...

Page 45: ...ess object all nets is a wildcard address that should never be changed and can be used in many types of cOS Core rules to refer to any IPv4 address or network range For the W20B all the Ethernet interface related address objects are gathered together in an address book folder called InterfaceAddresses By clicking on this folder it will be opened and the individual address objects it contains can b...

Page 46: ...stly set the IP4 Address object G2_net to be 203 0 113 0 24 Both the address objects G2_ip and wan_gw must belong to the same network in order for the interface to communicate with the ISP Together these three IPv4 address objects will be used to configure the interface connected to the Internet which in this example is G2 Select Network Interfaces and VPN Ethernet to display a list of the physica...

Page 47: ...tly allows traffic to flow from a given source network and source interface to a given destination network and destination interface A route defined in a cOS Core routing table which specifies on which interface cOS Core can find the traffic s destination IP address If multiple matching routes are found cOS Core uses the route that has the smallest in other words the narrowest IP range An IP polic...

Page 48: ...larity By using NAT cOS Core will use the destination interface s IP address as the source IP This means that external hosts will send their responses back to the interface IP and cOS Core will automatically forward the traffic back to the originating local host Only the outgoing interface therefore needs to have a public IPv4 address and the internal network topology is hidden For web browsing pu...

Page 49: ... setting up the required IP4 Address objects Note Disabling automatic route generation Automatic route generation is enabled and disabled with the setting Automatically add a default route for this interface using the given default gateway which can be found in the properties of the interface As part of the setup it is also recommended that at least one DNS server is also defined in cOS Core This ...

Page 50: ...added to the main cOS Core routing table which specifies that the network all nets can be found on the interface connected to the ISP and this route must also have the correct Default Gateway IP address specified This all nets route is added automatically by cOS Core during the DHCP address retrieval process After all IP addresses are set via DHCP and an all nets route is added the connection to t...

Page 51: ...will allow traffic from the source network G1_net and source interface G1 to flow to the destination network all nets and the destination interface Here the destination interface is the PPPoE tunnel that has been defined D PPTP setup For PPTP connections a PPTP client tunnel interface object needs to be created Let us assume that the PPTP tunnel will be called wan_pptp with a remote endpoint 203 0...

Page 52: ...tination interface which is the PPTP tunnel that has been defined DHCP Server Setup If the Clavister Next Generation Firewall is to act as a DHCP server then this can be set up in the following way First create an IP4 Address object which defines the address range to be handed out Here it is assumed that this has the name dhcp_range It is also assumed that another IP4 Address object dhcp_netmask h...

Page 53: ...he Syslog server properties dialog will now appear We give the server a name for example my_syslog and specify its IPv4 address as the syslog_ip object Tip Address book object naming The cOS Core address book is organized alphabetically so when choosing names for IP address objects it is best to have the descriptive part of the name first In this case use syslog_ip as the name and not ip_syslog Al...

Page 54: ...not be changed Its action is to drop all such traffic and always generate a log message for each dropped connection In order to gain control over the logging of dropped traffic it is recommended to create a drop all policy as the last entry in the main IP rule set This policy will have the source and destination network set to all nets and the source and destination interface set to any The servic...

Page 55: ...nse should be installed to remove the cOS Core 2 hour demo mode limitation Without a license installed cOS Core will have full functionality during the 2 hour period following startup but after that only management access will be possible Installing a license is described in Section 4 4 License Installation Methods Chapter 4 cOS Core Configuration 55 ...

Page 56: ...spond The response will be a normal CLI prompt if connecting directly through the local console port and a username password combination will not be required a password for this console can be set later Device If connecting remotely through an SSH Secure Shell client an administration username password must first be entered and the initial default values for these are username admin and password a...

Page 57: ...itial startup All cOS Core interfaces are logically equal for cOS Core and although their physical capabilities may be different any interface can perform any logical function Setting Up Internet Access Next we shall look at how to set up public Internet access with the CLI There are four options for setting up access which are listed below and then described in detail A Static manual configuratio...

Page 58: ...t the IP object G2_net which will be the IPv4 network of the connecting interface Device set IP4Address InterfaceAddresses G2_net Address 203 0 113 0 24 Before continuing it is recommended to verify the properties of the G2 interface using the following command Device show Interface Ethernet G2 The typical output from this will be similar to the following Property Value Name G2 IP InterfaceAddress...

Page 59: ...dressAction OutgoingInterfaceIP is not necessary as this is the default value but it is included here for clarity The service used in the above is http all which will allow HTTP web browsing but does not include the DNS protocol to resolve URLs into IP addresses To solve this problem a custom service could be used in the above IP policy which combines http all with the dns all service However the ...

Page 60: ... designated source network and source interface in this example the network G1_net and interface G1 to flow to the destination network all nets and the destination interface G2 C PPPoE setup For PPPoE connection create the PPPoE tunnel interface on the interface connected to the ISP The interface G2 is assumed to be connected to the ISP in the command shown below which creates a PPPoE tunnel objec...

Page 61: ...ws it As was done in option A above we must define an IP policy that will allow traffic from a designated source network and source interface in this example the network G1_net and interface G1 to flow to the destination network all nets and the destination interface which is the PPTP tunnel that has been defined Activating and Committing Changes After any changes are made to a cOS Core configurat...

Page 62: ...ddress FQDNAddress ts1_fqdn Address pool ntp org Next set the servers to use for date and time synchronization Device set DateTime TimeSyncEnable Yes TimeSyncServer1 ts1_fqdn TimeSyncServer2 203 0 113 5 Syslog Server Setup Although logging may be enabled no log messages are captured unless a server is set up to receive them and Syslog is the most common server type If the Syslog server s address i...

Page 63: ... gain control over the logging of dropped traffic it is recommended to create a drop all policy as the last entry in the main IP rule set This policy will have the source and destination network set to all nets and the source and destination interface set to any The service should be set to all_services in order to capture all types of traffic The following IP policy will drop all remaining traffi...

Page 64: ...d Automatically through the CLI In the CLI enter the command Device license activate request username myname password mypass The customer username and password login are included in the command and the license is fetched automatically across the Internet The login credentials are the same ones that are used for Clavister website login The reconf or shutdown command should be used to complete insta...

Page 65: ... methods Automatically by creating a permanent link between the W20B and the associated MyClavister account on the Clavister website Doing this is one of the last options in the setup wizard Alternatively the link can be established later by going to the Status Maintenance MyClavister in the Web Interface and entering the login credentials for the Clavister website The link can also be created in ...

Page 66: ...he second most obvious problem is if the IP address of the management computer is not configured correctly 4 Is the management interface properly connected Check the link indicator lights on the management interface If they are dark then there may be a cable problem 5 Using the ifstat CLI command To investigate a connection problem further connect the a console to the local console port on the Cla...

Page 67: ...rfaces and confirm that the correct cables are connected to the correct interfaces To look at the ARP activity only a particular interface follow the command with the interface name Device arpsnoop interface To switch snooping off use the command Device arpsnoop none Chapter 4 cOS Core Configuration 67 ...

Page 68: ...ation interface network combined with protocol type By default no IP rules are defined so all traffic is dropped At least one IP rule needs to be defined before traffic can traverse the Clavister Next Generation Firewall An alternative to IP Rule objects is to use IP Policy objects These have essentially the same function but simplify the setting up of address translation and the use of important ...

Page 69: ...uide The CLI Reference Guide provides a complete listing of the available CLI commands with their options A CLI overview is also provided as part of the cOS Core Administration Guide cOS Core Education Courses For details about classroom and online cOS Core education as well as cOS Core certification visit the Clavister company website at https www clavister com or contact your local sales represe...

Page 70: ...Chapter 4 cOS Core Configuration 70 ...

Page 71: ...version must be repeated The current cOS Core configuration will be lost but can be restored if a backup is available With the W20B a reset can be done in one of the following ways Using the Web Interface A factory reset is possible through a web browser over a network connection using the cOS Core Web Interface WebUI The steps to do this are the following 1 Open a web browser and enter the IP add...

Page 72: ...hernet interface IP addresses will not affect the local console connection A factory reset using the boot menu is performed with the following steps 1 Make sure a separate management computer running as a console is attached to the local console port of the W20B 2 Power up the W20B unit This may require a restart if the hardware is already powered up 3 As the console output appears press any conso...

Page 73: ...or at least 30 seconds longer after the power is applied 6 If a console was connected in step 1 the console output will indicate that the hardware has been reset to its factory defaults 7 Release the button and the W20B can now be configured as though it had been newly delivered and had not been previously configured Important The local console password will be reset to none If a local console pas...

Page 74: ...ny replacement Hardware will be warranted for the remainder of the original warranty period or thirty days whichever is longer Note that the term Start Date means the earlier of the product registration date OR ninety 90 days following the day of shipment by Clavister Obtaining Warranty Service with an RMA Warranty service can be obtained within the warranty period with the following steps 1 Obtai...

Page 75: ...ht in such a case to levy a reasonable handling charge in addition to mailing and or shipping costs Data on the Hardware Note that Clavister is not responsible for any of the software firmware information or memory data contained in stored on or integrated with any product returned to Clavister pursuant to a warranty claim Contacting Clavister Should there be a problem with the online form then Cl...

Page 76: ...rviceable parts inside these products Only service trained personnel can perform any adjustment maintenance or repair Säkerhetsföreskrifter Dessa produkter är säkerhetsklassade enligt klass I och har anslutningar för skyddsjord En obruten skyddsjord måste finnas från strömkällan till produktens nätkabelsanslutning eller nätkabel Om det finns skäl att tro att skyddsjorden har blivit skadad måste pr...

Page 77: ... Hauptstromquelle zu den Geräteingabeterminals den Netzkabeln oder dem mit Strom belieferten Netzkabelsatz voraus Sobald Grund zur Annahme besteht dass der Schutz beeinträchtigt worden ist das Netzkabel aus der Wandsteckdose herausziehen bis die Erdung wiederhergestellt ist Für LAN Kabelerdung Wenn Ihr LAN ein Gebiet umfasst das von mehr als einem Stromverteilungssystem beliefert wird müssen Sie s...

Page 78: ...orna de puesta a tierra Es preciso que exista una puesta a tierra continua desde la toma de alimentacíon eléctrica hasta las bornas de los cables de entrada del aparato el cable de alimentación hasta haberse subsanado el problema Puesta a tierra del cable de la red local LAN Si la LAN abarca un área cuyo suministro eléctrico proviene de más de una red de distribución de electricidad cerciorarse de...

Page 79: ...CC class A CE class A Environmental Operating and Storage Humidity 0 to 90 non condensing Operating Temperature 5 to 45 C Random vibration IEC 60068 2 64 operating 0 00142 G2 Hz 5 100 Hz Power Specifications Power Supply AC 100 240 VAC 50 60 Hz 0 3 A Typical Power Consumption 12 W BTU 43 BTU PSU Rated Power 25 W Ethernet Interface Support Gigabit RJ45 interfaces Automatic MDI X 1000BASE T copper R...

Page 80: ...Appendix B Declarations of Conformity 80 ...

Page 81: ...Appendix B Declarations of Conformity 81 ...

Page 82: ...ewall s address of 192 168 1 1 The IPv4 address 192 168 1 30 will be used for this purpose and the steps to set this up with Windows 7 are as follows 1 Press the Windows Start button 2 Select the Control Panel from the start menu 3 Select Network Sharing Center from the control panel 4 Select the Change adapter settings option 5 A list of adapters will appear and will include the Ethernet interfac...

Page 83: ...e the following IP address and enter the following values IP Address 192 168 1 30 Subnet mask 255 255 255 0 Default gateway 192 168 1 1 DNS addresses can be entered later once Internet access is established 8 Click OK to close this dialog and close all the other dialogs opened since step 1 Appendix C Windows 7 IP Setup 83 ...

Page 84: ...ress which belongs to the network 192 168 1 0 24 That address must be different from the firewall s default management interface address of 192 168 1 1 it is assumed that the IPv4 address 192 168 1 30 will be used for this purpose and the steps to set this up with Windows versions 8 8 1 or 10 are as follows 1 Open the Windows Control Panel the Category view is assumed here 2 Select Network Interne...

Page 85: ...l appear Select and display the properties for Internet Protocol Version 4 TCP IPv4 7 In the properties dialog select the option Use the following IP address and enter the following values IP Address 192 168 1 30 Subnet mask 255 255 255 0 Default gateway 192 168 1 1 DNS addresses can be entered later once Internet access is established Appendix D Windows 8 8 1 10 IP Setup 85 ...

Page 86: ...8 Click OK to close this dialog and close all the other dialogs opened since step 1 Appendix D Windows 8 8 1 10 IP Setup 86 ...

Page 87: ...ration Firewall To do this a selected Ethernet interface on the Mac must be configured correctly with a static IP The setup steps for this with Mac OS X are 1 Go to the Apple Menu and select System Preferences 2 Click on Network 3 Select Ethernet from the left sidebar menu 4 Select Manually in the Configure pull down menu 87 ...

Page 88: ...5 Now set the following values IP Address 192 168 1 30 Subnet Mask 255 255 255 0 Router 192 168 1 1 6 Click Apply to complete the static IP setup Appendix E Apple Mac IP Setup 88 ...

Page 89: ...Clavister AB Sjögatan 6J SE 89160 Örnsköldsvik SWEDEN Head office Sales 46 0 660 299200 Customer support 46 0 660 297755 www clavister com ...

Reviews: