Hello and welcome to this lecture in this lecture we start the configuration of the HQ 48 firewall.
So now that we have that apology up we should start the device right.
So you have these this button here start using all notes you should click on it and then all the devices
start.
Indeed the Windows 10 machine you can see it running now but I will minimize it for the moment and concentrate
on the firewall.
So I will say right click and go to the console.
So the putty that put you window starts right now.
I will change the settings and change the periods to appearance too.
Let's say 16 they should increase the font and indeed it is.
And now we are ready to start the configuration so default username and password it is the admin and
nothing for the password.
And we are now ready to start the configuration.
Perfect.
So let's go on and configure for example port number one for these you have to say config sys interface.
I will say edit port one question mark so we can go on and say first of all set and a lot of a lot of
options here but the idea is we have to say said
IP and I will say now 80 that 80 that 80 80 one.
This is a slash 30.
We cannot change dynamic IP.
So for now for this reason we have to change the the mode on port one which by default is dynamic into
steady.
So we will say that mode.
Question mark.
You can see you have the option static the ACP or PPO.
So I will say set mode to static.
Then I will try again to reapply the IP address and we are done now.
I will just say next and I can say now edit port number two for port number two we have set IP 1 and
2 that once say that one that one this is a slash 24.
And again I will say next and edit port number three this is going to be use for management and configure
the IP address that IP 172 that sixteen now sixteen that one again slash 24 because we want to test
the connectivity between the VPC yes the server or the DSP to the Great Firewall we would need to enable
ICMP or ping access on port number two.
So this one here and on port number three because we will access the HQ for the Great Firewall through
HD DP to to to see the good the graphical user interface with also we also enable here as access for
HD DPA G.P.S. and ping so that we can test connectivity between the windows machine and the 40 firewall.
So in port three we will say said allow access ping HDP H2 G.P.S. and next edit for number two for port
number two we are going to say that allow access being for port number one.
We will see in a moment what the what is configured already so show system interface port number one
and we see that we already have being a G.P.S. SSA GDP and uh f g f m so we only need ping because we
want to test connectivity from from the Windows 10 machine but through Internet cloud and we have that
already there.
It's enough.
So now some verification comments show the system interface.
Question Mark and you can see the IP addresses here which is perfect.
And if you want to see the configuration just hit enter.
Now we also need on the fourth to firewall or default route pointing to the default gateway.
I mean to these router to the Internet.
So we will end it right now so that we finish the configuration config rather static.
Now we'll see edit sequence number.
This is number one in the writing table.
And if you now go and say said the question mark you have some options with an asterisks which means
that these are mandatory.
So we will say set destination question mark the slides waiting now an IP so we say 0 0 0 0 which means
anything and the slice 0.
Now set device as you can see here is the gateway out interface or tunnel.
And if I say a question mark I will have to say now which is the interface that will be the default
gate before everything that comes from the line and so on.
And this is port number one.
So the fourth key Pharrell will will will push the packets the package that don't have don't have a
destination in the writing table or an exact match.
So it will use the default route.
We have defined it and the interface is port number one facing outside facing internet.
So let's say set device port 1.
And now I will say and show rather static and enter and we have here uh entry number one with the port
one being as the device the interface that's going to take care of this of these packets also config
system config router steady if I say again Edit 1 and let's say set we also have here gateway so Gateway
IP here is what I'm talking about Gateway IP for this role we can say said Gateway and this is 80 that
80 the 80.
Eighty two and that's it.
So another 40 gauge firewall it's configured ready to ready to for packets from the inside.
Going going through the Internet and and so on.
Yes it's true that we have not configured any net so network address translation on the fourth firewall
but this is not needed in case of the remote access VPN.
So I'm not going to try to access any resource on the Internet from the virtual B.S. from the server
or from the test lan PCI or whatever you call it.
I'm just going to try to access this resource from the Internet from the outside network and it will
be done through remote access VPN meaning that when this is established from the windows 10 machine
I will be able to ping it just like I was I was here in the same LAN.
So this is the scope of the remote access VPN.
So this lecture is done.
Thank you for.
I think for a time.
Join me in the next lecture in order to configure the next device.
Thanks a lot.