This publication, including all photographs, illustrations and software, is protected under
international copyright laws, with all rights reserved. Neither this manual, nor any of the material
contained herein, may be reproduced without the written consent of Clavister.
Disclaimer
The information in this document is subject to change without notice. Clavister makes no
representations or warranties with respect to the contents hereof and specifically disclaims any
implied warranties of merchantability or fitness for a particular purpose. Clavister reserves the
right to revise this publication and to make changes from time to time in the content hereof
without any obligation to notify any person or parties of such revision or changes.
Limitations of Liability
UNDER NO CIRCUMSTANCES SHALL CLAVISTER OR ITS SUPPLIERS BE LIABLE FOR DAMAGES OF
ANY CHARACTER (E.G. DAMAGES FOR LOSS OF PROFIT, SOFTWARE RESTORATION, WORK
STOPPAGE, LOSS OF SAVED DATA OR ANY OTHER COMMERCIAL DAMAGES OR LOSSES)
RESULTING FROM THE APPLICATION OR IMPROPER USE OF THE CLAVISTER PRODUCT OR
FAILURE OF THE PRODUCT, EVEN IF CLAVISTER IS INFORMED OF THE POSSIBILITY OF SUCH
DAMAGES. FURTHERMORE, CLAVISTER WILL NOT BE LIABLE FOR THIRD-PARTY CLAIMS AGAINST
CUSTOMER FOR LOSSES OR DAMAGES. CLAVISTER WILL IN NO EVENT BE LIABLE FOR ANY
DAMAGES IN EXCESS OF THE AMOUNT CLAVISTER RECEIVED FROM THE END-USER FOR THE
PRODUCT.
3.3. W20B Power Switch and Power Inlet Socket .... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... 29
5.1. Factory Reset Using the Web Interface .. ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... .72
4
Preface
Target Audience
The target audience for this guide is the administrator who has taken delivery of a packaged
Clavister W20B appliance and is setting it up for the first time. The guide takes the user from
unpacking and installation of the device through to power-up, including network connections
and initial cOS Core configuration.
Text Structure
The text is divided into chapters and subsections. Numbered subsections are shown in the table
of contents at the beginning of the document.
Notes to the main text
Special sections of text which the reader should pay special attention to are indicated by icons
on the left hand side of the page followed by a short paragraph in italicized text. There are the
following types of such sections:
Note
This indicates some piece of information that is an addition to the preceding text. It may
concern something that is being emphasized or something that is not obvious or
explicitly stated in the preceding text.
Tip
This indicates a piece of non-critical information that is useful to know in certain
situations but is not essential reading.
Caution
This indicates where the reader should be careful with their actions as an undesirable
situation may result if care is not exercised.
Important
This is an essential point that the reader should read and understand.
Warning
This is essential reading for the user as they should be aware that a serious situation
may result if certain actions are taken or not taken.
5
Preface
Text links
Where a "See section" link is provided in the main text, this can be clicked on to take the reader
directly to that reference. For example, see Appendix A, W20B Specifications.
Web links
Web links included in the document are clickable. For example, http://www.clavister.com.
Trademarks
Certain names in this publication are the trademarks of their respective owners.
cOS Core is the trademark of Clavister AB.
Windows, Windows XP, Windows Vista, Windows 7, Windows 8 and Windows 10 are either
registered trademarks or trademarks of Microsoft Corporation in the United States and/or other
countries.
Apple, Mac and Mac OS are trademarks of Apple Inc. registered in the United States and/or other
countries.
6
Chapter 1: W20B Product Overview
• W20A and W20B Differences, page 7
• Unpacking the W20B, page 9
• Interfaces and Ports, page 11
• Hardware Sensor Monitoring, page 13
1.1. W20A and W20B Differences
There are two W20B models:
•The older W20A.
•The newer W20B.
This guide is applicable only for the newer W20B model.
Important: Some earlier cOS Core versions are not supported
The supported cOS Core versions are as follows:
•The W20A can run any cOS Core version from 10.22.01 onwards.
•The W20B can run any cOS Core version from 12.00.03 onwards.
Earlier versions than those stated above are not supported and a downgrade should not
be attempted.
W20B Differences
The principal differences in the W20B when compared with the W20A are as follows:
•The W20B status LED is located at a different position.
•The W20B power switch in not a rocker switch but a switch with a static position of either On
7
Chapter 1: W20B Product Overview
or Off.
•The W20B uses a USB mini-B connector for console connection.
•The W20B factory reset button is located at a different position.
•The W20B internal fan does not have a sensor and so this will not display in cOS Core's
hardware monitoring feature.
8
1.2. Unpacking the W20B
Figure 1.1. An Unpacked Clavister W20B
This section details the unpacking of a single W20B device. Open the packaging box used for
shipping and carefully unpack the contents. The packaging should contain the following:
•The Clavister W20B unit.
•Local console cable.
Chapter 1: W20B Product Overview
•Power cable.
•Rack mount kit consisting of screws and 2 brackets suitable for a 19-inch rack.
Note: Report any items that are missing
If any items are missing from the W20B package, please contact the reseller or
distributor. All relevant documentation in PDF format can be downloaded from the
Clavister website and is included in all packaged distributions of new cOS Core versions.
Support Agreements
All purchasers of Clavister hardware products should subscribe to one of the available cOS Core
support agreements. These provide access to cOS Core updates and provide a hardware
replacement service in the case of a hardware fault. Without one of these agreements, hardware
warranty is limited to 2 years. The warranty terms are described further in Chapter 6, WarrantyService, along with a description of the hardware replacement procedure.
The Cold Standby Service
To ensure maximum uptime, a Cold Standby (CSB) Service is available from Clavister as an addition
to certain cOS Core support agreements. This service allows a second, identical W20B unit to be
purchased at a discount so that it can quickly substitute for the original unit in case of failure,
with the ability to quickly reassign the original cOS Core license to the standby unit. When the
faulty unit is returned to Clavister, a new cold standby unit is immediately sent back. More details
about the CSB service can be found in the separate Hardware Replacement Guide.
9
Chapter 1: W20B Product Overview
Downloadable W20B Resources
All documentation and other resources for the W20B can be downloaded from the W20B
product page which can be found by going to https://www.clavister.com/start and selecting
the W20B link.
Contacting Clavister Product Support
Clavister customer support can be contacted by logging in as a customer and reporting an issue
on the company website at https://www.clavister.com. Alternatively, the direct support telephone
number is +46 (0)660-29 77 55 (answered 24/7). Sales enquiries should be directed to the head
office number +46 (0)660-29 92 00.
End of Life Treatment
The W20B device is marked with the European Waste Electrical and Electronic Equipment (WEEE)
directive symbol which is shown below.
The product, and any of its parts, should not be discarded using a regular refuse disposal
method. At end-of-life, the product and parts should be given to an appropriate service that
deals with the removal of such specialist materials.
CAUTION: REPLACE INTERNAL BATTERIES CORRECTLY
THERE IS A RISK OF EXPLOSION IF AN INTERNAL BATTERY IS REPLACED WITH THE
INCORRECT TYPE. DISPOSE OF ANY USED INTERNAL BATTERIES ACCORDING TO THE
INSTRUCTIONS.
10
1.3. Interfaces and Ports
This section is an overview of the W20B product's external design.
Figure 1.2. Clavister W20B Connection Ports
The W20B features the following connection ports on the front panel:
•6 x RJ45 Gigabit Ethernet interfaces with the logical cOS Core names G1, G2, G3, G4, G5, and
G6.
The G1 interface is the default interface for management access over a network. However, it
can be used for other purposes.
Chapter 1: W20B Product Overview
•The W20B has a USB mini-B connector for console connection. This port is used for direct
access to the cOS Core Boot Menu and the cOS Core Command Line Interface (CLI). Connection
to this port is discussed in Section 3.5, “Mini-USB Console Port Connection”.
Note: The two USB Type A ports are not currently used
The two USB Type A ports on the W20B front panel are for future functionality and are
not currently used by cOS Core.
All the Ethernet interface ports function independently of each other and are not connected by a
switch fabric. All are capable of link speed auto-negotiation and can operate using 10Base-T,
100Base-Tx, or 1000Base-T. The interfaces names are written by each interface.
Figure 1.3. W20B Interface Ports
The full connection capabilities of all W20B Ethernet interfaces are listed in Appendix A, W20B
Specifications.
Status Indicator LEDs
On the right hand side of the front of the W20B are two status LEDs. These indicate the following
conditions:
•I - Orange when power is applied.
11
•i - Orange when cOS Core is running normally.
Chapter 1: W20B Product Overview
12
1.4. Hardware Sensor Monitoring
The W20B is equipped with sensors that provide cOS Core with information about operational
parameters such as CPU temperature. This information is available to the administrator through
the cOS Core management interfaces.
In addition, log message alerts can be automatically generated if a sensor reaches a value outside
of its normal operational range.
Configuring this feature, as well as a list of all the sensors available on each Clavister hardware
model and their normal ranges, can be found in the Hardware Monitoring section of the separate
cOS Core Administration Guide.
Chapter 1: W20B Product Overview
13
Chapter 1: W20B Product Overview
14
Chapter 2: Registering with Clavister
Before applying power to the W20B and starting cOS Core, it is important to understand the
customer and product registration procedures. There are two types of registration:
•Registering as a Clavister Customer
This involves registering basic contact and company information on the Clavister website
and establishing login credentials. Later, these credentials can also be used by cOS Core for
automatically registering the W20B hardware unit and automatically downloading the
correct license.
This is is a mandatory requirement for all new customers and needs to be done only once. A
description of doing this can be found below. Even if registration is not done before starting
the cOS Core wizard, the wizard will provide a link to the registration page so it can be done
while the wizard is running.
•Registration of the W20B Hardware Unit
This is mandatory for every hardware unit before a license can be downloaded. It can be
done in the following ways:
i.Automatic registration after cOS Core starts - This can done by the Setup Wizard
which starts automatically in the Web Interface when cOS Core is started for the first
time. The wizard is described in Section 4.1, “Web Interface and Wizard Setup”.
ii.Manual registration of the W20B on the Clavister website - This is described in the
last half of this chapter. Manual registration may be necessary if the W20B does not have
Internet access.
A. Registering as a Clavister Customer
The W20B registration steps for a first time user of Clavister hardware are as follows:
1.Open a web browser, go to https://www.clavister.com and select the Login link at the top
of the page.
15
Chapter 2: Registering with Clavister
2.The MyClavister login page is presented. If you are already registered, log in and skip to step
8. If you are a new customer accessing MyClavister for the first time, click the Create
Account link.
3.The registration page is now presented. The required information should be filled in. In the
example below, a user called John Smith is registering.
4.When the registration details are accepted, an email is sent to the email address given so
that the registration can be confirmed.
16
Chapter 2: Registering with Clavister
5.Below is an example of the heading in the email that would be received.
6.The confirmation link in the email leads back to the Clavister website to show that
confirmation has been successful and logging in is now possible.
7.After logging in, the customer name is displayed with links for changing settings and
logging out.
17
Chapter 2: Registering with Clavister
B. Registration of the W20B Hardware Unit
This section can be skipped if the W20B has access to the Internet. With Internet access available,
registration can be performed automatically by the cOS Core Setup Wizard which will appear as a
browser popup window in the Web Interface when cOS Core starts for the first time. The wizard
is described in Section 4.1, “Web Interface and Wizard Setup”.
If the unit does not have Internet access then manual registration is required and this is done
using the following steps:
1.Log in to the Clavister website and select the Register License option.
2.The registration page is displayed. Under the tab Hardware Serial Number and Service
Tag, enter the Hardware Serial Number and Service Tag must be entered. These two codes
are found on a label which should be attached to the W20B hardware itself. The label is
usually found on the hardware's underside but may by found in another position.
The image above shows an example label which illustrates the typical layout of identification
labels found on Clavister hardware products.
18
Chapter 2: Registering with Clavister
After Successful Hardware Registration
Once the W20B hardware unit is registered, a cOS Core license for the unit becomes available for
download and installation from Clavister servers. This installation can be done automatically
through the cOS Core Setup Wizard which is described in Section 4.1, “Web Interface and WizardSetup”.
If the W20B is not connected to the Internet, the license must be manually downloaded from the
cOS Core website and then manually uploaded.
All license installation options are listed and discussed in Section 4.4, “License InstallationMethods”.
19
Chapter 3: W20B Installation
• General Installation Guidelines, page 20
• Flat Surface Installation, page 22
• Rack Installation, page 23
• Management Computer Connection, page 24
• Mini-USB Console Port Connection, page 27
• Connecting Power, page 29
3.1. General Installation Guidelines
Follow these general guidelines when installing your Clavister W20B appliance:
•Safety
Take notice of the safety guidelines laid out in Chapter 7, Safety Precautions. These are
specified in multiple languages.
•Power
Make sure that the power source circuits are properly grounded and then use the power cord
supplied with the appliance to connect it to the power source.
•Using Other Power Cords
If your installation requires a different power cord than the one supplied with the appliance,
be sure to use a cord displaying the mark of the safety agency that defines the regulations for
power cords in your country. Such marks are an assurance that the cord is safe.
•Power Overload
Ensure that the appliance does not overload the power circuits, wiring and over-current
protection.
To determine the possibility of overloading the supply circuits, add together the ampere
ratings of all devices installed on the same circuit as the appliance and compare the total
with the rating limit for the circuit. The maximum ratings for the W20B are listed in
Appendix A, W20B Specifications.
20
Chapter 3: W20B Installation
•Surge Protection
A third party surge protection device should be considered and is strongly recommended as
a means to prevent electrical surges reaching the appliance. This is mentioned again in
Section 3.6, “Connecting Power”.
•Temperature
Do not install the appliance in an environment where the ambient temperature during
operation might fall outside the specified operating range. This range is documented in
Appendix A, W20B Specifications.
The intended operating temperature range is "room temperature". That is to say, the
temperature most commonly found in a modern office and in which humans feel
comfortable. This is usually considered to be between 20 and 25 degrees Celsius (68 to 77
degrees Fahrenheit). Special rooms for computer equipment may use a lower range and this
is also acceptable.
•Airflow
Make sure that airflow around the appliance is not restricted.
•Dust
Do not expose the appliance to environments with elevated dust levels.
Note: The specifications appendix provides more details
Detailed information concerning power supply range, operating temperature range and
other operating details can be found at the end of this document in Appendix A, W20B
Specifications.
21
3.2. Flat Surface Installation
The W20B can be mounted on any appropriate stable, flat, level surface that can safely support
the weight of the appliance and its attached cables. However, the W20B is designed to be rack
mounted and installation on a flat surface is not recommended and should only be done for
testing purposes.
Important: Always leave space around the appliance
Always ensure there is adequate space around the appliance for ventilation and access
to operating switches and cable connectors. No objects should be placed on top of the
casing.
Chapter 3: W20B Installation
22
3.3. Rack Installation
The W20B is designed to be installed in most standard 19-inch equipment racks.
In the packaging for the W20B there should be included a Rack Mount Kit which consists of two
brackets, each of which has three screws for attachment to the front-sides of the unit as shown in
the image below. There are predrilled holes already in the sides of the W20B unit which must be
used for attaching the brackets.
Chapter 3: W20B Installation
After attaching a bracket to either side of the unit, it is ready for rack mounting using a suitable
fastener. Rear support is not necessary.
Rack Mounting Guidelines
The following mounting guidelines should be followed:
•A rack or cabinet used for mounting should be adequately secured to prevent it from
becoming unstable and/or falling over.
•Devices installed in a rack or cabinet should be mounted as low as possible, with the heaviest
devices at the bottom and progressively lighter devices installed above.
23
3.4. Management Computer Connection
cOS Core Starts After Power Up
It is assumed that the W20B unit is now unpacked, positioned correctly and power is applied. If
not, the earlier chapters in this manual should be referred to before continuing.
Clavister's cOS Core network security operating system is preloaded on the W20B and will
automatically boot up after power is applied. After the start-up sequence is complete, an
external management computer can be used to configure cOS Core. The management
computer's operating system can be any kind as long it can run a standard modern web browser.
The Default Management Interface
After first time startup, cOS Core automatically makes management access available on a single
predefined Ethernet interface and assigns the private IPv4 address 192.168.1.1 to it.
For the W20B, the default management interface is the G1 interface.
Chapter 3: W20B Installation
cOS Core Setup Methods
Initial cOS Core software configuration can be done in one of the following ways:
•Using a web browser across a network connection
A standard web browser running on a standalone management computer (sometimes
referred to as the management workstation) can be used to access the cOS Core Web Interface.
This provides an intuitive graphical interface for cOS Core management. When this interface
is accessed for the first time, a setup wizard runs automatically to guide a new user through
key setup steps. The wizard can be closed if the administrator wishes to go directly to the
Web Interface to perform setup manually.
The wizard is recommended for its simplification of initial setup and is described in detail in
Section 4.1, “Web Interface and Wizard Setup”. The wizard assumes that configuring public
Internet access is one of the tasks to be performed and has a step for this.
•Using CLI commands across a network connection
The setup process can be performed using CLI commands which are input into a remote
management computer running console emulation software. The management computer is
linked across a network to an Ethernet interface on the firewall.
Once a network link to the CLI has been established, the configuration steps using the CLI are
described in Section 4.3, “Manual CLI Setup”.
The CLI allows step by step control of the setup process and should be used by
administrators who fully understand both the CLI and the setup steps required.
•Using CLI commands via the local console
Alternatively, CLI access can be through console emulation software running on a Windows
based computer connected directly to the mini-USB port on the W20B hardware. Direct
console connection is described in Section 3.5, “Mini-USB Console Port Connection”.
24
Chapter 3: W20B Installation
Network Connection Setup
For setting up access across a network using the Web Interface or the CLI via SSH, it is necessary
to connect an Ethernet interface on an external management computer to the default
management Ethernet interface on the W20B.
The default management Ethernet interface for the W20B is G1 and this is assigned the default
IPv4 address of 192.168.1.1 by cOS Core. This interface should be connected to the same
network as the management computer (or a network accessible from the management
computer via one or more switches).
Typically, the connection between the management computer and the default management
interface is made via a switch using standard Ethernet cables, as shown in the illustration below.
For connection to the public Internet, another W20B Ethernet interface should be connected to
an ISP. In the cOS Core setup wizard this is referred to as the WAN interface. In this guide, it is
assumed that the G2 interface of the W20B is used for Internet connection, although any other
available interface could be used instead.
Direct Network Connection to the Firewall's Management Interface
Connection to the default management interface G1 on the firewall from the management
computer can be done directly without using switch hardware. This could be done using a
crossover cable. However, all the RJ45 interfaces on the W20B support Automatic MDI-X and a
crossover cable is not necessary with them.
Management Computer Ethernet Interface Setup
Traffic will be able to flow between the designated management computer interface and the
Clavister Next Generation Firewall interface because they are on the same IP network. This means
the management computer interface should be first assigned the following static IPv4 addresses:
•IP address: 192.168.1.30
•Subnet mask: 255.255.255.0
•Default gateway: 192.168.1.1
25
Chapter 3: W20B Installation
Tip: Using another management interface IP address
The IPv4 address assigned to the management computer's Ethernet interface, could be
any address from the 192.168.1.0/24 network. However, the IP chosen must be
different from 192.168.1.1 which is used by cOS Core's default management interface.
The following appendices at the end of this guide describe how to set up the management
computer IP with different operating systems:
•Appendix C, Windows 7 IP Setup.
•Appendix D, Windows 8/8.1/10 IP Setup.
•Appendix E, Apple Mac IP Setup.
26
3.5. Mini-USB Console Port Connection
Note: Skip this section if using the Web Interface for set up
Console port connection can be skipped if cOS Core setup is going to be done using the
cOS Core Web Interface since neither CLI or boot menu access will be needed.
The local console port allows direct management connection to the W20B, either from a separate
computer acting as a console terminal. Local console access can then be used for both
management of cOS Core with CLI commands or to enter the boot menu in order to access W20B
firmware loader options.
The local console port is a physical mini-USB port (type mini-B) on the W20B hardware.
Chapter 3: W20B Installation
Figure 3.1. The W20B Mini-USB Local Console Port
Connection Steps
To connect a computer to the local console port, perform the following steps:
1.Connect a mini-USB connector directly to the local console port on the W20B.
2.Connect the other end of the cable to a USB port on computer running console emulation
software.
3.After connection to a PC, Windows will try to recognize the device and automatically install
the appropriate driver through the Windows Update™ feature. If Windows is unable to do
this automatically, the driver should be downloaded and installed manually.
For the Linux and MacOS micro-USB drivers or to download the Windows driver manually,
go to the W20B product page which can be found at https://www.clavister.com/start.
4.Direct the console emulator on the computer to connect to the newly installed device. After
successful connection, commands can be issued to the cOS Core Command Line Interface
(CLI).
Issuing CLI Commands
CLI commands can be issued via the local console port for both initial cOS Core setup as well as
for ongoing system administration.
The local console port need not be used if setup is done through a web browser as described in
Section 4.1, “Web Interface and Wizard Setup”. If the local console port is used for setup, no
password is initially needed and the CLI commands required are described in Section 4.3, “ManualCLI Setup”.
Remote Console Connection Using SSH
27
Loading...
+ 62 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.