EFW Support

Support => Installation Support => Topic started by: sineater on Sunday 04 July 2010, 01:56:07 am



Title: EFW SOFTWARE UTM 2.3 - Any way to setup network interfaces from the shell?
Post by: sineater on Sunday 04 July 2010, 01:56:07 am
I purchased the Endian Software UTM v.2.3 and want to install it on a virtual machine that is being hosted by my service provider.  I won't have immediate access to a machine within the green zone each time I image the box, so I was looking for a way to set up the RED network so that I could configure the box through the endian network once it is connecting to the world. I am accessing the shell through the VMWare console to which I have access to the machine.

Does anyone know how to do this through the shell? 

Thanks in advance and sorry for the noob question.

SE


Title: Re: EFW SOFTWARE UTM 2.3 - Any way to setup network interfaces from the shell?
Post by: mrkroket on Sunday 04 July 2010, 03:04:01 am
nano /var/efw/uplinks/main/settings
You can edit there your RED settings:

AUTOSTART=on
BACKUPPROFILE=
CHECKHOSTS=
DEFAULT_GATEWAY=X.X.X.X
DNS1=X.X.X.X
DNS2=X.X.X.X
ENABLED=on
MAC=
MANAGED=on
MTU=
ONBOOT=on
RED_ADDRESS=X.X.X.125
RED_BROADCAST=X.X.X.127
RED_CIDR=28
RED_DEV=eth1
RED_IPS=X.X.X.125/28
RED_NETADDRESS=X.X.X.112
RED_NETMASK=X.X.X.240
RED_TYPE=STATIC

Besides that, you'll probably need a Firewall rule for external system access:
nano /var/efw/xtaccess/config
Add a line like:

,Y.Y.Y.Y,,on,,ANY,,INPUTFW,ALLOW,,External Access

After that, reboot the system and cross your fingers



Title: Re: EFW SOFTWARE UTM 2.3 - Any way to setup network interfaces from the shell?
Post by: sineater on Sunday 04 July 2010, 03:08:02 am
Wow, thanks for the response.  I shall try and see how it goes.

One question, what is the difference between
RED_CIDR/RED_NETMASK and RED_ADDRESS/RED_NETADDRESS?

Thank you again!

SE


Title: Re: EFW SOFTWARE UTM 2.3 - Any way to setup network interfaces from the shell?
Post by: mrkroket on Tuesday 06 July 2010, 07:43:47 am
RED_NETADDRESS is the subnet adress on your lan. i.e. on 192.168.200.0/24 the base is 192.168.200.0 and netmask is /24 converted to mask=> 255.255.255.0.
Use an  CIDR calculator to get it. IT IS NOT YOUR RED IP, your red ip is RED_ADDRESS.

CIDR and Netmask is the same on different notation:
192.168.200.0/24 = 192.168.200.0 NETMASK 255.255.255.0.
Again use an  CIDR calc.


Title: Re: EFW SOFTWARE UTM 2.3 - Any way to setup network interfaces from the shell?
Post by: sineater on Thursday 08 July 2010, 03:09:40 pm
RED_NETADDRESS is the subnet adress on your lan. i.e. on 192.168.200.0/24 the base is 192.168.200.0 and netmask is /24 converted to mask=> 255.255.255.0.
Use an  CIDR calculator to get it. IT IS NOT YOUR RED IP, your red ip is RED_ADDRESS.

CIDR and Netmask is the same on different notation:
192.168.200.0/24 = 192.168.200.0 NETMASK 255.255.255.0.
Again use an  CIDR calc.


Thanks once again for a great explanation of this!! I will check and report the results soon.

SE