background image

CHAPTER

ONE

GETTING STARTED

The basic firewall configuration begins with connecting the pfSense® appliance to the Internet. Neither the modem
nor the pfSense appliance should be powered on at this time.

Establishing a connection to an Internet Service Provider (ISP) starts with connecting one end of an Ethernet cable to
the WAN port (shown in the

Input and Output Ports

section) of the pfSense appliance.

Warning:

The default LAN subnet on the firewall is

192.168.1.0/24

. The same subnet

cannot

be used on

both WAN and LAN, so if the subnet on the WAN side of the firewall is also

192.168.1.0/24

,

disconnect the

WAN

interface until the LAN interface has been renumbered to a different subnet.

The opposite end of the same Ethernet cable should be inserted in to the LAN port of the ISP-supplied modem. The
modem provided by the ISP might have multiple LAN ports. If so, they are usually numbered. For the purpose of this
installation, please select port 1.

The next step is to connect the LAN port (shown in the

Input and Output Ports

section) of the pfSense appliance to

the computer which will be used to access the firewall console.

Connect one end of the second Ethernet cable to the LAN port (shown in the

Input and Output Ports

section) of the

pfSense appliance. Connect the other end to the network connection on the computer. In order to access the web
configurator, the PC network interface must be set to use DHCP, or have a static IP set in the

192.168.1.x

subnet

with a subnet mask of

255.255.255.0

. Do not use

192.168.1.1

, as this is the address of the firewall, and will

cause an IP conflict.

1.1 Initial Setup

The next step is to power up the modem and the firewall. Plug in the power supply to the power port (shown in the

Input and Output Ports

section).

Once the modem and pfSense appliance are powered up, the next step is to power up the computer.

Once the pfSense appliance is booted, the attached computer should receive a

192.168.1.x

IP address via DHCP

from the pfSense appliance.

1.2 Logging Into the Web Interface

Browse to

https://192.168.1.1

to access the web interface. In some instances, the browser may respond with a message

indicating a problem with website security. Below is a typical example in Google Chrome. If this message or similar
message is encountered, it is safe to proceed.

2

Содержание SG-4860

Страница 1: ...Security Gateway Manual SG 4860 Copyright 2002 2019 Rubicon Communications LLC Dec 06 2019...

Страница 2: ...ed 2 2 Input and Output Ports 13 3 Safety and Legal 14 4 Connecting to the Console Port 23 5 Reinstalling pfSense Software 30 6 mSATA Installation 32 7 BIOS Flash Procedure 40 8 Additional Resources 4...

Страница 3: ...is Quick Start Guide covers the first time connection procedures for the Netgate SG 4860 Firewall Appliance and will provide the information needed to keep the appliance up and running Copyright 2002...

Страница 4: ...e appliance to the computer which will be used to access the firewall console Connect one end of the second Ethernet cable to the LAN port shown in the Input and Output Ports section of the pfSense ap...

Страница 5: ...At the login page enter the default pfSense password and username Username admin Password pfsense Click Login to continue 1 3 Wizard Upon successful login the following is displayed Copyright 2002 20...

Страница 6: ...se as well as http 192 168 1 1 1 6 Domain If an existing DNS domain is in use within the local network such as a Microsoft Active Directory domain use that domain here This is the domain suffix assign...

Страница 7: ...after filling in the fields as appropriate 1 8 Time Server Configuration 1 9 Time Server Synchronization Setting time server synchronization is quite simple We recommend using the default pfSense time...

Страница 8: ...old firewall may be entered here if it can be determined This can help avoid issues involved in switching out firewalls such as ARP caches ISPs locking to single MAC addresses etc If the MAC address...

Страница 9: ...ly require a DHCP Hostname entry Unless the ISP requires the setting leave it blank 1 15 Configuring PPPoE and PPTP Interfaces Information added in these sections is assigned by the ISP Configure thes...

Страница 10: ...rivate networks The following inbound address Ranges are blocked by this firewall rule 10 0 0 1 to 10 255 255 255 172 16 0 1 to 172 31 255 254 192 168 0 1 to 192 168 255 254 127 0 0 0 8 100 64 0 0 10...

Страница 11: ...168 1 0 24 IP addresses within the 172 16 0 0 12 RFC1918 private address block are the least frequently used We recommend selecting a block of addresses between 172 16 x x and 172 31 x x for least lik...

Страница 12: ...tor make the selection as highlighted The Dashboard display will follow 1 21 Backing Up and Restoring At this point basic LAN and WAN interface configuration is complete Before proceeding backup the f...

Страница 13: ...ick Download Configuration and save a copy of the firewall configuration This configuration can be restored from the same screen by choosing the backup file under Restore configuration Copyright 2002...

Страница 14: ...has been locked out or the password has been lost or forgotten See also Connecting to the Console Port Connect to the console Cable is required Tip To learn more about getting the most out of your pf...

Страница 15: ...ugh or crossover ethernet cables Note The rubber caps across the top are antenna ports for available wireless options The SG 4860 supports six 1000 100 10Base T Ethernet ports Two Ethernet ports are c...

Страница 16: ...New Zealand CE Marking RoHS WEEE Compliance Statement English Deutsch Espa ol Fran ais Italiano Declaration of Conformity C esky Czech Dansk Danish Nederlands Dutch English Eesti Estonian Suomi Finni...

Страница 17: ...th respect to voltage frequency and current requirements indicated on the manu facturer s label Connection to a different power source than those specified may result in improper operation damage to t...

Страница 18: ...uipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful...

Страница 19: ...ea obtener informaci n m s detallada sobre la eliminaci n segura de su aparato usado consulte a las autoridades locales al servicio de recogida y eliminaci n de residuos de su zona o pregunte en la ti...

Страница 20: ...E device is in compliance with the essential requirements and other relevant provisions of Directive 1999 5 EC 3 8 5 Eesti Estonian K esolevaga kinnitab NETGATE seadme NETGATE device vastavust direkti...

Страница 21: ...noteikumiem 3 8 13 Lietuvi kai Lithuanian NETGATE deklaruoja kad is NETGATE renginys atitinka esminius reikalavimus ir kitas 1999 5 EB Direktyvos nuostatas 3 8 14 Malti Maltese Hawnhekk Netgate jiddik...

Страница 22: ...Act and federal arbitration law apply to this agreement THERE IS NO JUDGE OR JURY IN ARBITRATION AND COURT REVIEW OF AN ARBITRATION AWARD IS LIMITED HOWEVER AN ARBITRATOR CAN AWARD ON AN INDIVIDUAL B...

Страница 23: ...emaining terms and conditions shall be enforced as written Headings are for reference purposes only and in no way define limit construe or describe the scope or extent of such section Our failure to a...

Страница 24: ...ISE MADE AVAILABLE TO YOU THROUGH ANY PRODUCTS SERVICES INCLUDING BUT NOT LIMITED TO DIRECT INDIRECT INCIDENTAL PUNITIVE AND CONSEQUENTIAL DAMAGES UNLESS OTHERWISE SPECIFIED IN WRITING IN NO EVENT WIL...

Страница 25: ...r than Windows then please skip forward to Advanced Configura tion 4 1 1 Serial Terminal Emulation Client A serial terminal emulation program is required to access the pfSense appliance console throug...

Страница 26: ...d install automatically for Windows 7 and above Open PuTTY and locate the Session display as shown below Set Serial line to the COM Port that is displayed in Windows Device Manager COM3 for this examp...

Страница 27: ...provide access to the console which is exposed via the USB Mini b 5 pin port on the appliance 4 2 1 Install the Driver Install an appropriate Silicon Labs CP210x USB to UART Bridge driver on the works...

Страница 28: ...to connect to the console Windows To locate the device name on Windows open Device Manager and expand the section for Ports COM LPT Look for an entry with a title such as Silicon Labs CP210x USB to UA...

Страница 29: ...ogram are Speed 115200 baud Data bits 8 Parity none Stop bits 1 Flow Control Off or XON OFF Hardware flow control RTS CTS must be disabled Client Specific Examples PuTTY Launch PuTTY and configure it...

Страница 30: ...ing 4 3 1 No Serial Output If there is no output at all check the following items Ensure the cable is correctly attached and fully inserted Ensure the terminal program is using the correct port Ensure...

Страница 31: ...e No Serial Output above Ensure the installed operating system is configured to activate the serial console Ensure the installed operating system is configured for the proper console e g ttyS1 in Linu...

Страница 32: ...ice 4 Insert the memstick into an open USB port and boot the system 5 After a minute the pfSense loader menu will be displayed with a 3 second timer Either allow the menu to timeout or press 1 the def...

Страница 33: ...synced Uptime 5m43s umass0 detached umass1 detached uhub1 detached 10 Remove the USB drive from the USB port Important If the USB drive remains attached the system will boot into the installer again b...

Страница 34: ...y behind the Ethernet ports There are two other similar ports on the top of the board but they are mPCIe ports The mSATA drives are not electically compatible with mPCIe connectors 1 Remove the four 4...

Страница 35: ...Security Gateway Manual SG 4860 Fig 1 SG 4860 mSATA Location Fig 2 Case Screws Copyright 2002 2019 Rubicon Communications LLC 33...

Страница 36: ...Security Gateway Manual SG 4860 Fig 3 SG 4860 Open Copyright 2002 2019 Rubicon Communications LLC 34...

Страница 37: ...Security Gateway Manual SG 4860 Fig 4 Remove the mSATA Standoff Screws Copyright 2002 2019 Rubicon Communications LLC 35...

Страница 38: ...Security Gateway Manual SG 4860 Fig 5 mSATA Drive Properly Inserted into the Slot Copyright 2002 2019 Rubicon Communications LLC 36...

Страница 39: ...Security Gateway Manual SG 4860 Fig 6 Secure the mSATA Drive Copyright 2002 2019 Rubicon Communications LLC 37...

Страница 40: ...Security Gateway Manual SG 4860 Fig 7 mSATA Drive Installed Copyright 2002 2019 Rubicon Communications LLC 38...

Страница 41: ...lid and case screws Use a hand screwdriver and be careful not to crossthread the screws 7 Reinstall the pfSense software on the new mSATA drive 8 Restore your configuration backup if you have one Copy...

Страница 42: ...ation is complete a message will appear saying pfSense pkg Netgate_Coreboot_Upgrade installation successfully completed 5 Now that the package is installed navigate to System Netgate Coreboot Upgrade...

Страница 43: ...e and for other helpful resources make sure to browse our Resource Library https www netgate com resources 8 3 Professional Services Support does not cover more complex tasks such as CARP configuratio...

Страница 44: ...Netgate for warranty information or view our Product Lifecycle page All Specifications subject to change without notice For support information view our support plans See also For more information on...

Отзывы: