Netgate SG-4860, Manual

Page 1: ...Security Gateway Manual SG 4860 Copyright 2002 2019 Rubicon Communications LLC Dec 06 2019...

Page 2: ...ed 2 2 Input and Output Ports 13 3 Safety and Legal 14 4 Connecting to the Console Port 23 5 Reinstalling pfSense Software 30 6 mSATA Installation 32 7 BIOS Flash Procedure 40 8 Additional Resources 4...

Page 3: ...is Quick Start Guide covers the first time connection procedures for the Netgate SG 4860 Firewall Appliance and will provide the information needed to keep the appliance up and running Copyright 2002...

Page 4: ...e appliance to the computer which will be used to access the firewall console Connect one end of the second Ethernet cable to the LAN port shown in the Input and Output Ports section of the pfSense ap...

Page 5: ...At the login page enter the default pfSense password and username Username admin Password pfsense Click Login to continue 1 3 Wizard Upon successful login the following is displayed Copyright 2002 20...

Page 6: ...se as well as http 192 168 1 1 1 6 Domain If an existing DNS domain is in use within the local network such as a Microsoft Active Directory domain use that domain here This is the domain suffix assign...

Page 7: ...after filling in the fields as appropriate 1 8 Time Server Configuration 1 9 Time Server Synchronization Setting time server synchronization is quite simple We recommend using the default pfSense time...

Page 8: ...old firewall may be entered here if it can be determined This can help avoid issues involved in switching out firewalls such as ARP caches ISPs locking to single MAC addresses etc If the MAC address...

Page 9: ...ly require a DHCP Hostname entry Unless the ISP requires the setting leave it blank 1 15 Configuring PPPoE and PPTP Interfaces Information added in these sections is assigned by the ISP Configure thes...

Page 10: ...rivate networks The following inbound address Ranges are blocked by this firewall rule 10 0 0 1 to 10 255 255 255 172 16 0 1 to 172 31 255 254 192 168 0 1 to 192 168 255 254 127 0 0 0 8 100 64 0 0 10...

Page 11: ...168 1 0 24 IP addresses within the 172 16 0 0 12 RFC1918 private address block are the least frequently used We recommend selecting a block of addresses between 172 16 x x and 172 31 x x for least lik...

Page 12: ...tor make the selection as highlighted The Dashboard display will follow 1 21 Backing Up and Restoring At this point basic LAN and WAN interface configuration is complete Before proceeding backup the f...

Page 13: ...ick Download Configuration and save a copy of the firewall configuration This configuration can be restored from the same screen by choosing the backup file under Restore configuration Copyright 2002...

Page 14: ...has been locked out or the password has been lost or forgotten See also Connecting to the Console Port Connect to the console Cable is required Tip To learn more about getting the most out of your pf...

Page 15: ...ugh or crossover ethernet cables Note The rubber caps across the top are antenna ports for available wireless options The SG 4860 supports six 1000 100 10Base T Ethernet ports Two Ethernet ports are c...

Page 16: ...New Zealand CE Marking RoHS WEEE Compliance Statement English Deutsch Espa ol Fran ais Italiano Declaration of Conformity C esky Czech Dansk Danish Nederlands Dutch English Eesti Estonian Suomi Finni...

Page 17: ...th respect to voltage frequency and current requirements indicated on the manu facturer s label Connection to a different power source than those specified may result in improper operation damage to t...

Page 18: ...uipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful...

Page 19: ...ea obtener informaci n m s detallada sobre la eliminaci n segura de su aparato usado consulte a las autoridades locales al servicio de recogida y eliminaci n de residuos de su zona o pregunte en la ti...

Page 20: ...E device is in compliance with the essential requirements and other relevant provisions of Directive 1999 5 EC 3 8 5 Eesti Estonian K esolevaga kinnitab NETGATE seadme NETGATE device vastavust direkti...

Page 21: ...noteikumiem 3 8 13 Lietuvi kai Lithuanian NETGATE deklaruoja kad is NETGATE renginys atitinka esminius reikalavimus ir kitas 1999 5 EB Direktyvos nuostatas 3 8 14 Malti Maltese Hawnhekk Netgate jiddik...

Page 22: ...Act and federal arbitration law apply to this agreement THERE IS NO JUDGE OR JURY IN ARBITRATION AND COURT REVIEW OF AN ARBITRATION AWARD IS LIMITED HOWEVER AN ARBITRATOR CAN AWARD ON AN INDIVIDUAL B...

Page 23: ...emaining terms and conditions shall be enforced as written Headings are for reference purposes only and in no way define limit construe or describe the scope or extent of such section Our failure to a...

Page 24: ...ISE MADE AVAILABLE TO YOU THROUGH ANY PRODUCTS SERVICES INCLUDING BUT NOT LIMITED TO DIRECT INDIRECT INCIDENTAL PUNITIVE AND CONSEQUENTIAL DAMAGES UNLESS OTHERWISE SPECIFIED IN WRITING IN NO EVENT WIL...

Page 25: ...r than Windows then please skip forward to Advanced Configura tion 4 1 1 Serial Terminal Emulation Client A serial terminal emulation program is required to access the pfSense appliance console throug...

Page 26: ...d install automatically for Windows 7 and above Open PuTTY and locate the Session display as shown below Set Serial line to the COM Port that is displayed in Windows Device Manager COM3 for this examp...

Page 27: ...provide access to the console which is exposed via the USB Mini b 5 pin port on the appliance 4 2 1 Install the Driver Install an appropriate Silicon Labs CP210x USB to UART Bridge driver on the works...

Page 28: ...to connect to the console Windows To locate the device name on Windows open Device Manager and expand the section for Ports COM LPT Look for an entry with a title such as Silicon Labs CP210x USB to UA...

Page 29: ...ogram are Speed 115200 baud Data bits 8 Parity none Stop bits 1 Flow Control Off or XON OFF Hardware flow control RTS CTS must be disabled Client Specific Examples PuTTY Launch PuTTY and configure it...

Page 30: ...ing 4 3 1 No Serial Output If there is no output at all check the following items Ensure the cable is correctly attached and fully inserted Ensure the terminal program is using the correct port Ensure...

Page 31: ...e No Serial Output above Ensure the installed operating system is configured to activate the serial console Ensure the installed operating system is configured for the proper console e g ttyS1 in Linu...

Page 32: ...ice 4 Insert the memstick into an open USB port and boot the system 5 After a minute the pfSense loader menu will be displayed with a 3 second timer Either allow the menu to timeout or press 1 the def...

Page 33: ...synced Uptime 5m43s umass0 detached umass1 detached uhub1 detached 10 Remove the USB drive from the USB port Important If the USB drive remains attached the system will boot into the installer again b...

Page 34: ...y behind the Ethernet ports There are two other similar ports on the top of the board but they are mPCIe ports The mSATA drives are not electically compatible with mPCIe connectors 1 Remove the four 4...

Page 35: ...Security Gateway Manual SG 4860 Fig 1 SG 4860 mSATA Location Fig 2 Case Screws Copyright 2002 2019 Rubicon Communications LLC 33...

Page 36: ...Security Gateway Manual SG 4860 Fig 3 SG 4860 Open Copyright 2002 2019 Rubicon Communications LLC 34...

Page 37: ...Security Gateway Manual SG 4860 Fig 4 Remove the mSATA Standoff Screws Copyright 2002 2019 Rubicon Communications LLC 35...

Page 38: ...Security Gateway Manual SG 4860 Fig 5 mSATA Drive Properly Inserted into the Slot Copyright 2002 2019 Rubicon Communications LLC 36...

Page 39: ...Security Gateway Manual SG 4860 Fig 6 Secure the mSATA Drive Copyright 2002 2019 Rubicon Communications LLC 37...

Page 40: ...Security Gateway Manual SG 4860 Fig 7 mSATA Drive Installed Copyright 2002 2019 Rubicon Communications LLC 38...

Page 41: ...lid and case screws Use a hand screwdriver and be careful not to crossthread the screws 7 Reinstall the pfSense software on the new mSATA drive 8 Restore your configuration backup if you have one Copy...

Page 42: ...ation is complete a message will appear saying pfSense pkg Netgate_Coreboot_Upgrade installation successfully completed 5 Now that the package is installed navigate to System Netgate Coreboot Upgrade...

Page 43: ...e and for other helpful resources make sure to browse our Resource Library https www netgate com resources 8 3 Professional Services Support does not cover more complex tasks such as CARP configuratio...

Page 44: ...Netgate for warranty information or view our Product Lifecycle page All Specifications subject to change without notice For support information view our support plans See also For more information on...