Clavister NetWall 100 Series, Руководство по началу работы

Страница: 43 / 81

4.3. Manual Web Interface Setup
This section describes initial cOS Core configuration performed directly through the Web
Interface, without using the setup wizard. Configuration is done as a series of individual steps,
giving the administrator more direct control over the process. Even if the wizard is used, this
section can also serve as a good introduction to using the Web Interface for configuring key
aspects of cOS Core.
Ethernet Interfaces
The physical connection of external networks to the Clavister Next Generation Firewall is through
the various
Ethernet interfaces which are provided by the hardware platform. On first-time
startup, cOS Core scans for these interfaces and determines which are available and allocates
their names. The first interface detected in the scan always becomes the initial default
management interface and this cannot be changed beforehand.
All Ethernet interfaces are logically equal for cOS Core and, although their physical capabilities
may be different, any interface can perform any logical function.
The NetWall 100 Series uses the LAN1 interface as its default management interface. To describe
manual Internet setup, it is assumed here that the LAN2 interface will be used for connection to
a protected internal client network and the WAN2 interface will be used for connection to the
public Internet.
As mentioned earlier, the LAN1 and WAN1 interfaces could be used to connect automatically to
clients and the Internet because they already have DHCP enabled in the default configuration
and there are predefined entries in the IP rule set that allow clients to browse the Internet. The
default configuration is discussed further in
Section 4.1, “The NetWall 100 Series Default
Configuration” . However, the purpose of this section is to show how manual setup can be done.
The WAN2 interface also has a DHCP client enabled on it in the default configuration so it is
assumed that this client will be disabled for manual setup.
Changing the admin Password
It is strongly recommended to change the password of the admin user as the first task in manual
cOS Core setup. This is done by first selecting the System option from the Web Interface toolbar
and then Local User Databases from the navigation pane to display the local user database list,
as shown below.
Next, select AdminUsers and then the Users tab to display the contents of this predefined
database
Chapter 4: cOS Core Configuration
43