Skip to main content
Deploy UserGate VE on a cloud server
Last update:

Deploy UserGate VE on a cloud server

  1. Make sure to save the image received in the ticket when the order You can configure the firewall on the device from which you are configuring the firewall.
  2. Upload the image to the image repository.
  3. Create a cloud server from the image.
  4. Assign an IP address to access the firewall.
  5. Initialize the firewall.
  6. Specify DNS and NTP servers.
  7. Activate the license.

Upload the image to the image repository⁠

  1. В control panels go to Cloud platform → Images.
  2. Click Create an image.
  3. Enter a name for the image.
  4. Select pool segment The image that will be loaded is the one in which you want to deploy the firewall.
  5. Select a file as the image source — format file qcow2obtained in the ticket at order of the firewall.
  6. Click Download.
  7. Select the image format and container format. If you do not know which formats to specify, specify raw image format and bare container format.
  8. Select the operating system — Другая.
  9. Click Create.

Create a cloud server from an image⁠

  1. В control panels go to Cloud platform → Servers.

  2. Click Create a server.

  3. Enter the name of the cloud server — it will only appear in the control panel.

  4. Select pool segment where you downloaded the image.

  5. In the block Source click Choose another source.

  6. Open the tab My images and select the firewall image.

  7. Click Select.

  8. Select the cloud server configuration. The configuration must match demands for the selected firewall model.

  9. Select or create a subnet to which the server will connect. You need at least one public address to access the firewall from the Internet:

    • public subnet — all addresses in the subnet will be accessible from the Internet;
    • private subnet with public IP address — a private subnet and one static public IP address.

  10. Select the rest of the server settings — more details in the instructions Create a cloud server.

  11. Click Create.

Assign an IP address to access the firewall⁠

  1. Open the CLI.

  2. Connect to the firewall:

    • login — Admin;
    • the password is. utm.

  3. Switch the Internet port to the static:

    iface config -name port0 -mode static

  4. Assign an IP address to the port:

    iface config -name port0 -ipv4 <ip/mask>

    Specify <ip/mask> - the server's Internet port address with a subnet mask. You can view the address in control panels under Cloud platform → Servers → server page → tab Ports → field IP address. The address is unmasked.

  5. Create a default route to the Internet:

    gateway add -ipv4 <ip_address> -weight 1 -enabled true -default true

    Specify <ip_address> — gateway of the server subnet in which the Internet port is located. You can view the gateway address in control panels under Cloud platform → Servers → server page → tab Ports → click on the subnet name and copy the value from the field Gateway.

Initialize the firewall⁠

  1. Open the page in your browser:

    https://<ip_address>:8001

    Specify <ip_address> — The IP address of the firewall. You can view the IP address in control panels under Cloud platform → Servers → server page → tab Ports → field Public IP or IP address.

  2. Select the language of the system.

  3. Select the time zone.

  4. Accept the license agreement.

  5. Optional: change the administrator login.

  6. Change your password.

  7. Click Start.

  8. Wait for the installation procedure to complete.

Specify DNS and NTP servers⁠

  1. Open the page in your browser:

    https://<ip_address>:8001

    Specify <ip_address> — The IP address of the firewall. You can view the IP address in control panels under Cloud platform → Servers → server page → tab Ports → field IP address or Public IP.

  2. Enter your username and password.

  3. Go to the section Settings → Network → DNS.

  4. Click Add.

  5. Enter the IP addresses of the DNS servers. We recommend using Selectel recursive DNS servers But you can specify any available DNS servers.

  6. Click Save.

  7. Optional: go to the section Settings and in the block Configuring the server time change the value in the field Primary NTP server. We recommend using Selectel NTP servers But you can specify any available NTP servers.

Activate license⁠

  1. Open the page in your browser:

    https://<ip_address>:8001

    Specify <ip_address> — The IP address of the firewall. You can view the IP address in control panels under Cloud platform → Servers → server page → tab Ports → field IP address or Public IP.

  2. Enter your username and password.

  3. At the top, click on the button Unregistered version.

  4. Enter the pin code received at ticket when ordering a firewall.

  5. Click Further.

  6. Fill out the registration form. We recommend that you provide the same information as in your Selectel account.

  7. Click Further.

  8. Wait for the firewall to register. Information about the license composition and component expiration dates will be displayed in the section Dashboard en bloc License.