After first successful Login to web-interface it is necessary to configure essential parameters and network interfaces of ICS CUBE. It is possible using initial system configuration wizard. On first login it starts automatically.
Wizard is step-by-step guide for system configuration. It will ask you to specify the name of your company, host name and login/password of administrator.
After completion of initial steps ICS CUBE will display the table of all changes to be applied. Please confirm, by pressing “Finished”.
During the first login to web-interface, “Firewall” module has “not configured” settings. Initial settings are considered finalized when “Firewall” module is in enabled status. In order to achieve this it is necessary that at least one network interface “Provider” and one of “Local Network” has been created in “Providers and Networks”. It is recommended to start network wizard for initial configuration of network interfaces.
During the first step the wizard will display all found network interfaces. For each one of them you need to specify its type.
|Don’t use||Interface won’t be used|
|Local network||Server’s internal interface. This network will have users.|
|Local network VLAN||Works in the same way as the usual local network but using VLAN technology. Allows creating multiple virtual local networks on one physical interface.|
|Provider||External server interface with statically configured IP address.|
|Provider PPPoE||External server interface connecting to the ISP through PPPoE protocol.|
|Provider DHCP||External server interface with dynamic IP address received from provider’s DHCP server.|
|Provider VLAN||External server interface with statically configured IP address and VLAN ID of the subnet to which it is connected.|
|DMZ network||Internal server interface. This network can have corporate servers with externally reachable IP addresses. This kind of network configuration is used to increase servers’ security and limit the level of access to them with the help of firewall.|
|PPTP provider over IP||External server interface connected to provider through PPTP protocol with statically configured IP address in “gray” network of provider.|
|PPTP provider over DHCP||External server interface connected to provider through PPTP protocol with dynamic IP address in private network of provider received from provider’s DHCP server.|
|DMZ network VLAN||Internal server interface. Same as DMZ network except VLAN ID parameter.|
Important: 3G and Wi-Fi providers need to be created separately as they are not displayed in the list of interfaces by the wizard.
In our example, interface le0 will remain as local network and interface le1 will be configured as simple provider.
During the next step, the wizard will ask you to enter the local network parameters. If necessary it’s possible to specify MAC-addresses of the interface and configure interface to distribute IP addresses to local hosts through DHCP protocol by defining the range of distributed addresses.
Warning! Instead of entering network mask in a separate box, in ICS CUBE you have to enter IP address with network prefix in the format of IP address/prefix.
Network mask to prefix conversion table:
You can also define the ranges of addresses in the format IP address: mask. For example, address of ICS CUBE in your local network could be entered as 192.168.17.123:255.255.255.0.
Next it is necessary to configure your provider. In order to do that you need to enter address and prefix of the network, gateway address and DNS server address (one or two).
Network mask for provider has to be entered in the same format as during the previous step: either address/prefix or address: mask. In the case when there is more than one provider you can set priority for each priority.
The last page of the network setup wizard will display all the parameters to take effect.
You need to click “ok” and network setup wizard will apply the new configuration and open module of network interfaces.
Important: If you loose access to web-interface after completion of the Wizard, please check if local area network is present in the field called “Access through web” in settings of Firewall. It should contain all the networks, which are used to connect to ICS CUBE web interface. If you change subnet of the local interface, please specify it.
If you are unsure what is the best way to integrate ICS CUBE in your network, please check several standard ICS CUBE installation scenarios
After network configuration you can start creating users. Users creation.