Home  Prev  Hardware Replacement Guide for NetWall Firewalls  

Appendix C: Management Interface Setup

When cOS Core is started for the first time on a Clavister hardware appliance that has factory defaults, the first Ethernet interface on the unit becomes the default management interface and it is automatically assigned the IP address 192.168.1.1 in the network 192.168.1.0/24.

The external management workstation computer that connects to this interface may already have its connecting Ethernet interface configured for a different network. The workstation can be reconfigured to be on the 192.168.1.0/24 network but it is often preferable to instead change the IP address and network of the interface on the Clavister NetWall Firewall.

To do this, administrator access to the cOS Core Command Line Interface (CLI) is required. This is done by connecting a computer running terminal emulation software to the serial console port of the new hardware unit via an RS232 cable. Details about making this connection can be found in the Getting Started Guide for each Clavister hardware model.

[Note] Note: New hardware does not require a console password

For new hardware, no password will be required for CLI access through the serial console port. However, setting a console password later is recommended for better security.

Once CLI access is obtained, the IP address and network of the default management Ethernet interface can be changed. For example, if the IP address of the interface if1 is to be set to 168.190.1.1 the CLI commands would be: 

Device:/> set Address IP4Address InterfaceAddresses/if1_ip
			Address=168.190.1.1

Followed by a similar command to set the network: 

Device:/> set Address IP4Address InterfaceAddresses/if1_net
			Address=168.190.1.0/24

[Note] Note: Clavister hardware uses a folder for IP addresses

The address object names in the above CLI commands are qualified with the folder name InterfaceAddresses. On most Clavister hardware, this folder is always used to store all interface related address objects.

After the IP address objects are changed, the new configuration must be activated with the CLI commands: 

Device:/> activate
		
Device:/> commit

Home  Prev