The box layer of the Control Center uses the same "Getting Started" steps as the CloudGen Firewall. Once the licenses and other basic settings are complete, you must configure the Control Center management layer.

Before You Begin

Configure the box layer of your Control Center. For more information, see Get Started.

Step 1. Configure the Time Settings

Enable the NTP daemon and configure the time servers.

1. Log into the box layer of the Control Center.

2. Go to CONFIGURATION > Configuration Tree > Box > Administrative Settings.

3. In the left menu, select Time Settings/NTP.

4. Click Lock.

5. Set Enable sync on Startup to yes.

6. Click + to add time servers to the Time Server IP list. 

7. Set Start NTPd to yes. 

8. (optional) configure NTP peers. For more information, see How to Configure Time Server (NTP) Settings.

9. Click Send Changes and Activate. 

Step 2. Configure the Control Center IP Address

The Control Center IP address is the IP address you use when connecting to the Control Center.

1. Log into the box layer of the Control Center. If the Control Center is running on a HA cluster, log into the primary unit.

2. Go to CONFIGURATION > Configuration Tree > Box > Network.

3. Click Lock.

4. In the section Management Network and IPs, click + to add the IP address.

5. The Shared IPs in this Network window is displayed.

6. Enter the IP Address for the Control Center.

7. Set Alias for this IP to Second IP. (You must select Second IP because - as a default - the service IP 127.0.0.9/32 is already pre-configured as the First IP).

8. Set Responds to Ping to yes.

9. Click OK.

10. Click Send Changes and Activate.

11. Go to CONTROL > Box.

12. In the left menu bar, expand the Network label by clicking the arrow.

13. Click Activate new network configuration.

14. Click Failsafe.

Step 3. Export the Base License on Box Layer

1. Open the CONFIGURATION > Box > Box Licenses page.

2. In the Licenses section, right-click the base license.

3. In the menu list, select Export.

4. Another list is displayed.

5. In the menu list, select Copy to Clipboard.

Step 4. Import the Base License

For importing the base license into the Control Center, you must log in with the Control Center IP address that you configured above. Keep the tab for the box level access in Firewall Admin open.

1. Log into the Control Center.

2. When receiving multiple sequential warnings, always click Trust until Firewall Admin displays the Status Map.

3. Go to CONFIGURATION > Configuration Tree > Multi-Range > Global Settings > CC Identity. If a window is displayed indicating that This Connection is Untrusted, click Yes.

4. Click Lock.

5. In the CC Identification section, enter the following information:

   1. Organization – Enter the name for your organization.

   2. CC Product License – Click Import and select Import from Clipboard. Confirm the Terms and Conditions.

Step 5. Configure CC Identification Settings

The CC Identification settings are required to secure communication between the Control Center and the CloudGen Firewalls it manages.

1. Go to CONFIGURATION > Configuration Tree > Multi-Range > Global Settings > CC Identity.

2. Click Lock.

3. In the Additional CC IP Addresses table, add an entry for the management IP address. Usually, the Control Center has one server IP address and one management IP address. In this case, enter the management IP address.

4. In the left menu, click Trust Chain.

5. Define the keys and certificates required for secure communication between the Control Center and the CloudGen Firewalls that it will manage:

   • CC Private Key – Click New Key and specify the key length.

   • CC Certificate – Click Edit and specify the certificate settings.

   • CC SSH Key  – Click New Key and specify the key length.

6. Click Send Changes and Activate.

Step 6. (optional) Complete the Auto Activation Form

To automatically activate managed CloudGen Firewall licenses, you must enter the data for the auto-activation form once.

1. Log into the Control Center.

2. Go to CONFIGURATION > Configuration Tree > Multi-Range > Global Settings > CC Parameters.

3. In the left menu, select Activation Template.

4. Click Lock.

5. Enter the Owner and Purchase Information.

6. Click Send Changes and Activate.

Next Steps

Continue with the steps below to set up the Control Center according to your needs.