---
title: "Deploy UserGate VE in a VMware-based cloud"
sidebar_label: "Deploy UserGate VE in a VMware-based cloud"
sidebar_position: 2
description: "How to deploy a UserGate VE image in a public or private VMware-based cloud"
---

import Formbricks from '@theme/MDXComponents/Formbricks'

import Tabs from '@theme/Tabs'
import TabItem from '@theme/TabItem'
import {TabItemLabel} from '@selectel/docux/components'

# Deploy UserGate VE in a VMware-based cloud

You can deploy the UserGate VE virtual firewall in a [public](/public-cloud/) or [private VMware-based cloud](https://selectel.ru/services/cloud/vmware/private-cloud/).

1. [Save the firewall image](#save-firewall-image).
2. [Create a vApp and virtual machine from the image](#create-vapp-and-vm-from-image).
3. [Connect the virtual machine to a public subnet](#connect-vm-to-public-subnet).
4. [Assign an IP address to access the firewall](#assign-ip-to-access-firewall).
5. [Initialize the firewall](#initialize-firewall).
6. [Specify DNS and NTP servers](#specify-dns-and-ntp-servers).
7. [Activate the license](#activate-license).

## 1. Save the firewall image \{#save-firewall-image}

1. Go to the ticket that was created when [ordering the firewall](/firewalls/order/order-virtual-firewall.mdx).
2. Save the firewall image to the device from which you will perform the configuration.

## 2. Create a vApp and virtual machine from the image \{#create-vapp-and-vm-from-image}

1. From the [control panel](https://my.selectel.ru/vmware/), open the Cloud Director panel: in the top menu, click **Products** → **VMware-based cloud** → **Cloud Director**.
2. Open the virtual data center page where you want to deploy the firewall.
3. Go to the **Compute** → **vApps**.
4. Click **NEW** → **Add vApp From OVF**.
5. Upload the [saved firewall image files](#save-firewall-image).
6. In the **Review Details** section, verify the image details.
7. Optional: in the **Select vApp Name** section, in the **Name** and **Description** fields, change the vApp name and description.
8. Optional: in the **Configure Resources** section, in the **Computer Name** field, change the virtual machine name.
9. Optional: in the **Configure Resources** section, in the **Storage Policy** field, change the network volume type.
10. In the **Customize Hardware** section, set the virtual machine configuration parameters, taking into account the [configuration requirements](/firewalls/order/firewall-types.mdx#configuration-requirements).
11. Check the details and click **Finish**.
12. Wait for the virtual machine creation from the image to complete. The installation process will appear at the bottom of the page in the **Tasks**.

## 3. Connect the virtual machine to a public subnet \{#connect-vm-to-public-subnet}

1. Optional: if you do not have a Direct Connected subnet or you want to use a new one, [create a Direct Connected subnet](/public-cloud/manage-networks/manage-direct-connect.mdx#create-direct-connected-subnet).
2. From the [control panel](https://my.selectel.ru/vmware/), open the Cloud Director panel: in the top menu, click **Products** → **VMware-based cloud** → **Cloud Director**.
3. Open the virtual data center page → **Virtual Machines**.
4. Open the virtual machine page → **Hardware** → **NICs**.
5. Click **Edit**.
6. Click **ADD NETWORK TO VAPP**.
7. In the **Type** field, select **Direct**.
8. In the table, select the Direct Connected subnet.
9. Click **Add**.
10. Make sure that in the **NIC 0** row, the **Primary NIC** and **Connected** checkboxes are selected.
11. In the **NIC 0** row, in the **Network** column, select the same Direct Connected subnet.
12. In the **NIC 0** row, in the **IP** column, specify an IP address from the Direct Connected subnet, other than its gateway address.
13. Click **Save**.

## 4. Assign an IP address to access the firewall \{#assign-ip-to-access-firewall}

<Tabs queryString="assign-ip-to-access-firewall">
  <TabItem value="ugos-6" default>
    <TabItemLabel>
      UGOS 6
    </TabItemLabel>

    1. From the [control panel](https://my.selectel.ru/vmware/), open the Cloud Director panel: in the top menu, click **Products** → **VMware-based cloud** → **Cloud Director**.

    2. Open the virtual data center page → **Virtual Machines**.

    3. Open the virtual machine page.

    4. Click **POWER ON**.

    5. Click **LAUNCH WEB CONSOLE**.

    6. [Connect to the firewall](/firewalls/usergate/connect-to-firewall.mdx):

       * login — Admin;
       * password — utm.

    7. Switch the internet port to `static` mode:

       ```bash
       iface config -name port0 -mode static
       ```

    8. Assign an IP address to the port:

       ```bash
       iface config -name port0 -ipv4 <ip_address>/<mask>
       ```

       Specify:

       * `<ip_address>` — IP address from the Direct Connected subnet that you assigned to the virtual machine when [connecting to the public subnet in step 3](#connect-vm-to-public-subnet);
       * `<mask>` — subnet mask.

    9. Create a default route to the internet:

       ```bash
       gateway add -ipv4 <gateway> -weight 1 -enabled true -default true
       ```

       Specify `<gateway>` — gateway of the Direct Connected subnet. You can find the gateway address in the [control panel](https://my.selectel.ru/vpc/): in the top menu, click **Products** → **VMware-based cloud** → data center page → **Direct Connected subnets** tab → **Gateway**.
  </TabItem>

  <TabItem value="ugos-7">
    <TabItemLabel>
      UGOS 7
    </TabItemLabel>

    1. From the [control panel](https://my.selectel.ru/vmware/), open the Cloud Director panel: in the top menu, click **Products** → **VMware-based cloud** → **Cloud Director**.

    2. Open the virtual data center page → **Virtual Machines**.

    3. Open the virtual machine page.

    4. Click **POWER ON**.

    5. Click **LAUNCH WEB CONSOLE**.

    6. Select the **UGOS NGFW (serial console)** mode.

    7. [Connect to the firewall](/firewalls/usergate/connect-to-firewall.mdx):

       * login — Admin;
       * password — leave the field empty.

    8. Go to configuration mode:

       ```bash
       configure
       ```

    9. Assign an IP address to the internet port:

       ```bash
       set network interface adapter port0 ip-addresses [ <ip_address>/<mask> ]
       ```

       Specify:

       * `<ip_address>` — address from the Direct Connected subnet that you assigned to the virtual machine when [connecting to the public subnet in step 3](#connect-vm-to-public-subnet).
       * `<mask>` — subnet mask.

       Square brackets `[ ]` must be separated by spaces on both sides.

    10. Create a default route to the internet:

        ```bash
        create network gateway interface port0 enabled on ip <gateway> weight 1 default on
        ```

        Specify `<gateway>` — gateway of the Direct Connected subnet. You can find the gateway address in the [control panel](https://my.selectel.ru/vpc/): in the top menu, click **Products** → **VMware-based cloud** → data center page → **Direct Connected subnets** tab → **Gateway**.
  </TabItem>

  <TabItem value="ugos-7-1">
    <TabItemLabel>
      UGOS 7.1 and higher
    </TabItemLabel>

    1. From the [control panel](https://my.selectel.ru/vmware/), open the Cloud Director panel: in the top menu, click **Products** → **VMware-based cloud** → **Cloud Director**.

    2. Open the virtual data center page → **Virtual Machines**.

    3. Open the virtual machine page.

    4. Click **POWER ON**.

    5. Click **LAUNCH WEB CONSOLE**.

    6. Select the **UGOS NGFW (serial console)** mode.

    7. [Connect to the firewall](/firewalls/usergate/connect-to-firewall.mdx):

       * login — Admin;
       * password — usergate.

    8. Go to configuration mode:

       ```bash
       configure
       ```

    9. Assign an IP address to the internet port:

       ```bash
       set network interface adapter port0 ip-addresses [ <ip_address>/<mask> ]
       ```

       Specify:

       * `<ip_address>` — address from the Direct Connected subnet that you assigned to the virtual machine when [connecting to the public subnet in step 3](#connect-vm-to-public-subnet);
       * `<mask>` — subnet mask.

       Square brackets `[ ]` must be separated by spaces on both sides.

    10. Create a default route to the internet:

        ```bash
        create network gateway interface port0 enabled on ip <gateway> weight 1 default on
        ```

        Specify `<gateway>` — gateway of the Direct Connected subnet. You can find the gateway address in the [control panel](https://my.selectel.ru/vpc/): in the top menu, click **Products** → **VMware-based cloud** → data center page → **Direct Connected subnets** tab → **Gateway**.
  </TabItem>
</Tabs>

## 5. Initialize the firewall \{#initialize-firewall}

1. Open the page in your browser:

   ```bash
   https://<ip_address>:8001
   ```

   Specify `<ip_address>` — IP address that you [assigned to access the firewall in step 4](#assign-ip-to-access-firewall).

2. Go to the **Settings** section.

3. Select the system language.

4. Select the time zone.

5. Accept the license agreement.

6. Change the administrator password.

7. Wait for the installation procedure to complete.

## 6. Specify DNS and NTP servers \{#specify-dns-and-ntp-servers}

1. Open the page in your browser:

   ```bash
   https://<ip_address>:8001
   ```

   Specify `<ip_address>` — IP address that you [assigned to access the firewall in step 4](#assign-ip-to-access-firewall).

2. Go to the **Settings** → **Network** → **DNS** section.

3. Click **Add**.

4. Specify the DNS server IP addresses. We recommend using [Selectel recursive DNS servers](/infrastructure/dns/dns-recursive-servers-list.mdx), but you can specify any available DNS servers.

5. Click **Save**.

6. Go to the **Settings** → **Network** → **NTP** section.

7. Click **Add**.

8. Specify the NTP server IP addresses. We recommend using [Selectel NTP servers](/infrastructure/ntp/ntp-servers-list.mdx), but you can specify any available NTP servers.

9. Click **Save**.

## 7. Activate the license \{#activate-license}

<Tabs queryString="activate-license">
  <TabItem value="ugos-6" default>
    <TabItemLabel>
      UGOS 6
    </TabItemLabel>

    1. Open the page in your browser:

       ```bash
       https://<ip_address>:8001
       ```

       Specify `<ip_address>` — IP address that you [assigned to access the firewall in step 4](#assign-ip-to-access-firewall).

    2. Go to the **License Information** → **Registered version** section.

    3. Enter the pin code received in the ticket when [ordering the firewall](/firewalls/order/order-virtual-firewall.mdx).

    4. Click **Next**.

    5. Fill out the registration form. We recommend using the same data as in your Selectel account.

    6. Click **Next**.

    7. Wait for the device to register. Information about the license composition and component expiration dates will be displayed in the **License Information** section.
  </TabItem>

  <TabItem value="ugos-7">
    <TabItemLabel>
      UGOS 7 and higher
    </TabItemLabel>

    1. Open the page in your browser:

       ```bash
       https://<ip_address>:8001
       ```

       Specify `<ip_address>` — IP address that you [assigned to access the firewall in step 4](#assign-ip-to-access-firewall).

    2. Go to the **License Information** → **Registered version** section.

    3. Enter the pin code received in the ticket when [ordering the firewall](/firewalls/order/order-virtual-firewall.mdx).

    4. Click **Next**.

    5. Wait for the device to register. Information about the license composition and component expiration dates will be displayed in the **License Information** section.
  </TabItem>
</Tabs>

<Formbricks />