Skip to main content
Deploy UserGate VE on a cloud server
Last update:

Deploy UserGate VE on a cloud server

  1. Save the firewall image.
  2. Upload the image to the image repository.
  3. Create a cloud server from the image.
  4. Assign an IP address to access the firewall.
  5. Initialize the firewall.
  6. Specify DNS and NTP servers.
  7. Activate the license.

Save the firewall image⁠

  1. Navigate to the ticket that was created when ordering a firewall.
  2. Save the firewall image to the device from which you will configure it.

Upload the image to the image repository⁠

  1. В control panels go to Cloud platform → Images.
  2. Click Create an image.
  3. Enter a name for the image.
  4. Select for the image pool segment In this case, you will need to deploy a firewall.
  5. In the field Operating system select — Other.
  6. In the field Source select — File.
  7. Click Download and select the file on your device firewall image.
  8. Select the image format and container format. If you do not know which formats to specify, specify the image format rawand the container — bare.
  9. Click Create.

Create a cloud server from an image⁠

  1. В control panels go to Cloud platform → Servers.

  2. Click Create a server.

  3. Enter the name of the cloud server — it will only appear in the control panel.

  4. Select pool segment where you downloaded the firewall image.

  5. In the block Source click on the name of the image.

  6. Open the tab My images and select the firewall image.

  7. Click Select.

  8. Select the cloud server configuration. The configuration must match demands for the selected firewall model.

  9. Select or create a subnet to which the server will connect. You need at least one public address to access the firewall from the Internet:

    • public subnet — all IP addresses in the subnet will be accessible from the Internet;
    • private subnet with public IP address — a private subnet and one static public IP address.

  10. Select the rest of the server settings — more details in the instructions Create a cloud server.

  11. Click Create.

Assign an IP address to access the firewall⁠

  1. Open the CLI.

  2. Connect to the firewall:

    • Admin;
    • the password is utm.

  3. Switch the Internet port to the static:

    iface config -name port0 -mode static

  4. Assign an IP address to the port:

    iface config -name port0 -ipv4 <ip-address>/<mask>

    Specify:

    • <ip_address> — The IP address of the server's Internet port. You can view the address in control panels under Cloud platform → Servers → server page → tab Ports → field Public IP. The address is unmasked;
    • <mask> — subnet mask.

  5. Create a default route to the Internet:

    gateway add -ipv4 <ip_address> -weight 1 -enabled true -default true

    Specify <ip_address> — gateway of the server subnet in which the Internet port is located. You can view the gateway address in control panels under Cloud platform → Servers → server page → tab Ports → subnet name → tab Subnetworks → subnet card → field Subnet Gateway.

Initialize the firewall⁠

  1. Open the page in your browser:

    https://<ip_address>:8001

    Specify <ip_address> — The IP address of the firewall. You can view the IP address in control panels under Cloud platform → Servers → server page → tab Ports → field Public IP.

  2. Select the language of the system.

  3. Select the time zone.

  4. Accept the license agreement.

  5. Optional: change the administrator login.

  6. Change your password.

  7. Click Start.

  8. Wait for the installation procedure to complete.

Specify DNS and NTP servers⁠

  1. Open the page in your browser:

    https://<ip_address>:8001

    Specify <ip_address> — The IP address of the firewall. You can view the IP address in control panels under Cloud platform → Servers → server page → tab Ports → field IP address.

  2. Enter your username and password.

  3. Go to the section Settings → Network → DNS.

  4. Click Add.

  5. Enter the IP addresses of the DNS servers. We recommend using Selectel recursive DNS servers But you can specify any available DNS servers.

  6. Click Save.

  7. Optional: go to the section Settings and in the block Configuring the server time change the value in the field Primary NTP server. We recommend using Selectel NTP servers But you can specify any available NTP servers.

Activate the license⁠

  1. Open the page in your browser:

    https://<ip_address>:8001

    Specify <ip_address> — The IP address of the firewall. You can view the IP address in control panels under Cloud platform → Servers → server page → tab Ports → field Public IP.

  2. Enter your username and password.

  3. At the top, click on the button Unregistered version.

  4. Enter the pin code you received in the ticket at ordering a firewall.

  5. Click Further.

  6. Fill out the registration form. We recommend that you provide the same information as in your Selectel account.

  7. Click Further.

  8. Wait for the firewall to register. Information about the license composition and expiration dates of the components will be displayed under Dashboard en bloc License.