Setup Wizard: Difference between revisions

From Edge Threat Management Wiki - Arista
Jump to navigationJump to search
 
(16 intermediate revisions by 3 users not shown)
Line 1: Line 1:
The ''Setup Wizard'' will open automatically when Untangle first boots.
The ''Setup Wizard'' will open automatically when NG Firewall first boots.
If you do not have a keyboard/mouse/video connected to the Untangle server, the Setup Wizard can be reached by plugging into a DHCP-configured laptop into the internal interface opening a browser to <nowiki>http://192.168.2.1/</nowiki>.
If you do not have a keyboard/mouse/video connected to the NG Firewall server, the Setup Wizard can be reached by plugging into a DHCP-configured laptop into the internal interface opening a browser to <nowiki>http://192.168.2.1/</nowiki>.


Once installed, the setup wizard can be repeated at any time and can be found in the NG Firewall GUI at Config > System > Support > Setup Wizard.
Once installed, the setup wizard can be repeated at any time and can be found in the NG Firewall GUI at '''Config > System > Support''' > Setup Wizard.


=== Language selection ===
=== Welcome Page ===
Before you begin the setup wizard, select your preferred language.
For versions 16.3 and newer the Setup Wizard begins with a welcome page. Choose to either create an ETM Dashboard account or login with an existing account to get started. Your ETM Dashboard account is free and is necessary to activate a trial or complete license on the device. Your account is also linked to [https://www.untangle.com/cloud/command-center/ ETM Dashboard], enabling you to remotely manage your Arista Edge Threat Management appliances.


[[Image:Untangle-setup-language.png|300px|center|Setup Wizard - Select language]]
By logging in or creating your ETM Dashboard account, the Add Appliance wizard opens automatically and includes the UID of your appliance. The Add Appliance wizard guides you through the remainder of the setup steps for your new NG Firewall appliance. See [https://support.untangle.com/hc/en-us/articles/115004175567-Adding-Untangle-appliances-to-ETM-Dashboard Adding Appliances to ETM Dashboard] for more details.


=== Setup Wizard - Welcome ===
If your NG Firewall device is not connected to the Internet or requires specific configuration to connect, the wizard allows you to Configure the Internet Connection. If you are unable to connect to the Internet, you can continue with the local setup wizard by following these instructions: [[Offline Setup Wizard]]


The next screen simply welcomes you to the Setup Wizard. Click next to continue.
The next steps include installing the desired apps and possibly tuning the configuration of your NG Firewall.
 
[[Image:setup_wizard_step0.png|400px|center|Setup Wizard - Welcome]]
 
=== Setup Wizard - Step 1 - Configure the Server ===
 
The first step has you set a password for the administrator account for Untangle and select a timezone.
 
[[Image:setup_wizard_step1.png|600px|center|Setup Wizard - Step 1]]
 
=== Setup Wizard - Step 2 - Identify Network Cards ===
 
The second step shows you the network cards. If this is a appliance from Untangle you can simply continue to the next step. If this is a third party appliance or a custom server, you should verify that the physical network cards are mapped to the correct (desired) interface.
 
[[Image:setup_wizard_step2.png|600px|center|Setup Wizard - Step 2]]
 
To determine that the physical network cards are mapped to the correct interface plug in one at a time and verify that it is in the correct position. For example, unplug all network cables from Untangle. Plug in the cable into the desired "External" physical network card. If the green light on "External" lights up then that physical network card is mapped to the correct interface. If the green light on another interface lights up, you should drag that device to the External interface using the arrow icon next to the device name. Alternative you can select the drop down on the device and choose the desired device. Once that is complete unplug all network cables and complete the process for all other interfaces.
 
[[Image:setup_wizard_step2_remap.png|600px|center|Setup Wizard - Step 2 Remapping]]
 
=== Setup Wizard - Step 3 - Configure The Internet Connection ===
 
The third step configures your External (WAN) interface.
 
[[Image:setup_wizard_step3_dhcp.png|600px|center|Setup Wizard - Step 3 Auto]]
 
The default is ''Auto (DHCP)'' and the current automatically assigned address will be displayed if an address was successfully acquired. ''Auto (DHCP)'' is typical in home and small networks where ISPs provide no static addresses and DHCP is used to hand out addresses. Also, if Untangle is installed behind another device serving DHCP, this option can be used.
 
For larger networks ''Static'' configuration is preferred. In a static configuration, complete the ''Address'' ''Netmask'' ''Gateway'' and ''Primary DNS'' using values provided by your ISP.
 
[[Image:setup_wizard_step3_static.png|600px|center|Setup Wizard - Step 3 Static]]
 
However, If Untangle is being installed behind another firewall doing NAT the ISPs public address should not be used. It is common to use the gateway's IP plus one. For example if if 192.168.1.1 is the gateway for Untangle you can use 192.168.1.2 for the address for Untangle and 192.168.1.1 as the gateway.
 
Some ISP's provide connectivity via ''PPPoE.'' In this case, select ''PPPoE'' and provide the ''PPPoE'' username and password.
 
''Note:'' If the network settings are blank, and there is no network connectivity, ensure that a network cable is connecting your modem to your Untangle appliance. Sometimes it is necessary to restart the modem so that the network settings are visible.
=== Setup Wizard - Step 4 - Internal Network Interface ===
 
The fourth step will configure your "Internal" interface (and DHCP server and NAT configuration.)
There are two choices.
 
[[Image:setup_wizard_step4_static.png|600px|center|Setup Wizard - Step 4]]
 
You can configure the internal interface with private static IP address (ie 192.168.2.1) and enable DHCP serving and NAT (Network Address Translation) so all internal machines will have private addresses and share one public IP. This is commonly referred to as ''Router'' mode.
 
You can also configure the internal interface to be bridged to the external. In this mode the internal interface does not have its own address and is simply shares the External's address. This is commonly referred to as ''Transparent Bridge'' mode.
 
==== Router ====
 
In '''Router''' mode, Untangle will be the edge device on your network and serve as a router and firewall. In this case you'll need to set up your External and Internal interfaces correctly for traffic to flow, which should have been done while installing.
 
[[Image:router_mode.png|frame|center|Untangle in Router mode]]
 
==== Transparent Bridge ====
 
In '''Transparent Bridge''' mode, Untangle is installed behind an existing firewall and sits between your existing firewall and main switch. When in Bridge mode Untangle is transparent, meaning you won't need to change the default gateway of the computers on your network or the routes on your firewall - just put the Untangle between your firewall and main switch and that's it. You do not change the configuration of existing clients or the existing firewall!
 
[[Image:bridge_mode.png|frame|center|Untangle in Bridge mode]]
 
=== Setup Wizard - Step 5 - Configure Automatic Upgrade Settings ===
 
In the fifth step ''Automatic Upgrades'' are configured. If Automatic Upgrades is enabled will automatically check for new versions and upgrade automatically between 1am and 2am every morning.
 
[[Image:setup_wizard_step5.png|600px|center|Setup Wizard - Step 5]]
 
=== Setup Wizard - Finished ===
 
That's it!
 
[[Image:setup_wizard_step6.png|600px|center|Setup Wizard - Congratulations]]
 
The next step is installing the desired applications and possibly further tuning the configuration of your Untangle server, then actually dropping Untangle into the network if it is not already in place.
 
Remember, the setup wizard can be repeated at any time. In Config > System > Support, click ''Setup Wizard''.

Latest revision as of 16:43, 6 February 2024

The Setup Wizard will open automatically when NG Firewall first boots. If you do not have a keyboard/mouse/video connected to the NG Firewall server, the Setup Wizard can be reached by plugging into a DHCP-configured laptop into the internal interface opening a browser to http://192.168.2.1/.

Once installed, the setup wizard can be repeated at any time and can be found in the NG Firewall GUI at Config > System > Support > Setup Wizard.

Welcome Page

For versions 16.3 and newer the Setup Wizard begins with a welcome page. Choose to either create an ETM Dashboard account or login with an existing account to get started. Your ETM Dashboard account is free and is necessary to activate a trial or complete license on the device. Your account is also linked to ETM Dashboard, enabling you to remotely manage your Arista Edge Threat Management appliances.

By logging in or creating your ETM Dashboard account, the Add Appliance wizard opens automatically and includes the UID of your appliance. The Add Appliance wizard guides you through the remainder of the setup steps for your new NG Firewall appliance. See Adding Appliances to ETM Dashboard for more details.

If your NG Firewall device is not connected to the Internet or requires specific configuration to connect, the wizard allows you to Configure the Internet Connection. If you are unable to connect to the Internet, you can continue with the local setup wizard by following these instructions: Offline Setup Wizard

The next steps include installing the desired apps and possibly tuning the configuration of your NG Firewall.