Ingeniero

Unified Threat Management

QUICK START GUIDE CR25ia CR35ia Appliances

Document Version: AN QSG 25ia-35ia/10.00.0309-1.0-20100819

DEFAULTS

Default IP addresses
Ethernet Port A B IP Address 172.16.16.16/255.255.255.0 192.168.2.1/255.255.240.0 Zone LAN WAN

Package Contents
Checking the package contents - Check that the package contents are complete. ! ! ! ! ! ! One CyberoamAppliance One Serial Cable One Straight-through Ethernet Cable One AC Adapter Cable Documentation CD One Cyberoam Quick Start Guide

Default Username & Password
Web Admin Console * Username cyberoam * Password cyber

CLI Console (SSH/Serial Connection)
*

Serial Cable

Blue Straight-through Ethernet Cable

AC Adapter Cable

Password

admin
Documentation CD Quick Start Guide

* Usernameand Password are case sensitive

If any items from the package are missing. please contact Cyberoam Support at support@cyberoam.com

2

UNDERSTANDING THE APPLIANCE

FRONT PANEL
Link Status LEDs

Data Transfer Indicator LEDs

Power LED

HDD LED

BACK PANEL
Console Port Use Serial cable to connect to the Management Computer

USB Port Provided for future use

External Power FeedPorts

As Cyberoam does not pre-configure any ports for LAN, WAN, DMZ networks, it is not necessary to use any particular port for them. Usage of ports depends on how the physical connection is required or planned.

3

PLANNING THE CONFIGURATION

Before configuring, you need to plan the deployment mode of Cyberoam. Cyberoam can be placed in Bridge or Gateway/Route mode according toyour requirement. To control the Internet access through Cyberoam the entire Internet bound traffic from the LAN network should pass through Cyberoam.

Gateway Mode
Configure as Gateway if you want to use Cyberoam as 1. A firewall or replace an existing Firewall 2. A gateway for routing traffic 3. Link load balancer and implement gateway failover functionality Apart from configuring Gateway IPaddress (IP address through which all the traffic will be routed), you must also configure LAN and WAN IP addresses.
DMZ Network

Internet
10.10.10.1

Mail Server

Web Server

10.10.10.2

10.10.10.3

Cyberoam in Gateway mode 61.10.15.18 WAN 61.10.15.17 Gateway mode policies controlling traffic between LAN and WAN networks. 192.168.1.254 192.168.1.9 192.168.1.5 Gateway mode policiescontrolling traffic between LAN & DMZ networks.

LAN Network

Bridge Mode
Configure as Bridge if 1. 2. You have a private network behind an existing firewall or behind a router and you do not want to replace the firewall. You are already masquerading outgoing traffic.
Internet

Cyberoam in Bridge mode
LAN Network

LAN
192.168.1.5

192.168.1.254

192.168.1.1 Management IP Bridge modepolicies controlling traffic between LAN and WAN networks

You will be able to manage and monitor the entire Internet traffic passing through Cyberoam, control web access and apply bandwidth and application restrictions, apply antivirus and antispam policy and IPS policy in either of the modes.

4

GETTING CONFIGURATION INFORMATION

Use the table given below to gather ISP (Internet ServiceProvider) information
If Internet connection is via Cable modem, DSL with a Router Home DSL/ADSL T1/E1, Static broadband, Cable or DSL with a static IP You are probably using Get information Cyberoam configuration from Network Configuration wizard Select “Obtain an IP from DHCP” Select “Obtain an IP from PPPoE” Select “Use Static IP”

DHCP

-----------

PPPoE Static

Username Password IPaddress Subnet mask Gateway IP address Primary DNS Secondary DNS How to get the information: From the PC connected to the Internet: open a command prompt window, type the command ipconfig.

Use the tables given below to gather the information you need before proceeding to deploy the Appliance.

Gateway Mode
For all the required Ports

Bridge Mode
___.___.___.___ ___.___.___.___...