Clavister NetWall 100 Series, Руководство по началу работы

Страница: 59 / 81

Device:/AdminUsers> set User admin Password=Mynew*pass99
The next step is to return the CLI to the default CLI context:
Device:/AdminUsers> cc
Device:/>
By default, using a strong admin account password will be enforced meaning that the new
password must comply with a set of strong password conventions. Activating configuration
changes will not be possible while the password does not comply. The only way around this is to
first turn off the strong password policy in the configuration but this is not recommended.
Setting the Date and Time
Many cOS Core functions, such as event logging and certificate handling, rely on an accurate
system time. It can be set manually using the
time command. A typical example might be:
Device:/> time -set 2021-03-24 14:43:00
Note that the date is entered in yyyy-mm-dd format and the time is stated in 24 hour hh:mm:ss
format. Automatically setting the time with a time server is discussed at the end of this section.
Ethernet Interfaces
The connection of external networks to the Clavister Next Generation Firewall is via the various
Ethernet interfaces which are provided by the hardware platform. On first-time startup, cOS Core
determines which interfaces are available and allocates their names. One interface is chosen as
the initial default management interface and this can only be changed after initial startup.
All cOS Core interfaces are logically equal for cOS Core and although their physical capabilities
may be different, any interface can perform any logical function. With the 100 Series, the LAN1
interface is the default management interface. To illustrate manual Internet setup, it is assumed
here that the LAN2 interface will also be used for connection to a protected internal client
network and the WAN2 interface will be used for connection to the public Internet.
As mentioned earlier, the LAN1 and WAN1 interfaces could be used to connect automatically to
clients and the Internet because they already have DHCP enabled and there are predefined
entries in the IP rule set that allow clients to browse the Internet. The default configuration is
discussed further in
Section 4.1, “The NetWall 100 Series Default Configuration” . However, the
purpose of this section is to show how manual setup can be done.
Setting Up Internet Access
Setting up public Internet access manually using the CLI will now be described. There are four
options which are listed below.
A. Static - manual configuration.
B. DHCP - automatic configuration.
C. PPPoE setup.
D. PPTP setup.
The steps to configure these Internet connection alternatives with the CLI are discussed next.
Note that on the NetWall 100 Series, a DHCP client is enabled by default on the WAN1 interface
so that usually method B is used. The other methods are included here in case they are needed.
Chapter 4: cOS Core Configuration
59