FireBrick

FireBrick - Firewalls, Bonding ADSL, Routers, Traffic Shaping...

FireBrick FB6000
FireBrick FB6000

Getting started

How to get started with your new FB6000 series product

Initial connection

There are two ways to connect to the FB6000 either using Ethernet or serial port. The serial console will, in later releases, provide a full command line configuration editor but at present only has basic commands so we recommend you use Ethernet.

Simply connect port 0 to your LAN. The FB6000 will pick up an IP address by DHCP from your DHCP server. There is no default address if you do not have a DHCP server. If you have an IPv6 router announcing a prefix on your LAN the FB6000 will also pick up an IPv6 address.

FB6000 blank config

The first stage is to confirm the IP address of the FB6000 and to connect to its configuration web interface. Then you can edit the initial config.

If your DHCP server cannot advise the IP address you can confirm this using the serial interface with the show subnets command. The serial interface is 9600bps 8N1.

You can then access the web interface using this IP address. Initially you are prompted to edit the config and add a username and password. Until you do this the FB6000 is open to telnet, serial, and web with no security.

The web interface allows you to edit the config and save it. The format of the username record is explained on the screen. e.g. <user name="fred" password="mysecret"/>

Recommended initial config

You should understand basic XML before attempting to edit the XML file.

We recommend the following minimum settings

  • Add a top level user element(s) with attributes name and password. These can then be used to log in to the web interface.
  • In services object ensure http object is defined and include attribute trusted listing your IP blocks for trusted access to the web interface.
  • In services object we suggest adding a telnet object and include attribute allow listing your IP blocks for trusted access to the telnet interface.
  • You may like to add a system object with name and contact attributes.
  • You may like to add a subnet object to the interface object with an ip attribute stating the IP/subject of the FB6000, and remove the blank subnet which causes DHCP operation. You can have both if you like.
  • You may like to add a syslog object with server attribute stating the IP of your local syslog server.

Hints and tips about XML config files