Chengetedzo Gateway Manual
Microsoft Azure
Iyo pfSense® Plus Firewall/VPN/Router yeMicrosoft Azure ndeye stateful firewall, VPN, uye kuchengetedza mudziyo. Inokodzera kushandiswa seVPN endpoint zvese zvesaiti-kune-saiti VPN tunnel uye sevhavha yekuwana iri kure VPN sevha yenharembozha. Native firewall functionality inowanikwa semamwe akawanda maficha akadai se bandwidth kuumbwa, kuona intrusion, proxying, nezvimwe kuburikidza nemapakeji. pfSense Plus yeAzure inowanikwa muAzure Marketplace.
KUTANGA
1.1Kutangisa Instance neNIC imwechete
Muenzaniso weNetgate® pfSense® Plus yeAzure iyo yakagadzirwa neNIC imwechete inogona kushandiswa seVPN endpoint kubvumidza kupinda kune Azure Virtual Network (VNet). Iyo imwe NIC pfSense
Plus virtual muchina (VM) inongogadzira WAN interface, asi ichiri kupa yeruzhinji uye yakavanzika IP mukati meAzure.
MuAzure Management Portal, tanga chiitiko chitsva cheNetgate pfSense® Plus Firewall/VPN/Router mudziyo.
- Kubva paAzure portal Dashboard, tinya paMusika.
- Tsvaga and select the Netgate Appliance for Azure.
- Seta zita rechiitiko pamwe nezita rekushandisa, password, boka rezviwanikwa, uye dunhu.
Zita rekushandisa rakapinda richagadzirwa seyakakodzera pfSense Plus account pabhoti uye uchakwanisa kupinda mukati web GUI. Pamusoro pezvo, mushandisi we admin achavewo nepassword yayo yakaiswa kune kukosha kwaiswa.
Yambiro: Zita rekushandisa rinowanzo shandiswa kupa pfSense Plus admin, asi admin izita rakachengetwa risingatenderwe kusetwa neAzure kupa wizard. Zvakare kune chengetedzo yegore, inoonekwa seyakanyanya tsika kudzikamisa kupinda kwemudzi mushandisi, saka mudzi unovharika nekusarudzika.
- sunga saizi yemuenzaniso.
- Sarudza rudzi rwedhisiki, uye zvigadziriso zvetiweki (chaiyo network, subnet, yeruzhinji IP kero, network yekuchengetedza boka).
Kuti utore mudziyo weNetgate pfSense ® Plus, unofanirwa kuve nechokwadi chekuti boka rekuchengetedza rine mitemo yekubvumidza ports 22 (SSH) uye 443 (HTTPS) kuwana mutsara wekuraira uye Web GUI. Kana ukaronga kubvumira mamwe matraffic, wedzera mamwe mamagumo.
Kune IPsec, bvumira UDP pachiteshi 500 (IKE) uye UDP pachiteshi 4500 (NAT-T).
For OpenVPN, allow UDP chiteshi 1194.
Dzvanya pane Network kuchengetedza boka uye wedzera sezvinodiwa. - Simbisa zvaunenge wasarudza pane Summary peji uye tinya OK.
- Ziva mutengo uri papeji yekutenga wobva wadzvanya Purchase.
- Kana iyo VM yatanga uye Azure portal inoratidza kuti yauya, unogona kuwana iyo web interface. Shandisa password yawakaseta panguva yekugovera uye mushandisi we admin. Iwe unofanirwa ikozvino kukwanisa kuwana mudziyo.
1.2Kutangisa Instance ine Multiple Network Interfaces.
Muenzaniso weNetgate® pfSense® Plus yeAzure ine akawanda NIC ayo anofanirwa kushandiswa sefirewall kana gedhi haigone kupihwa muAzure portal. webnzvimbo. Kuti upe chiitiko chine akawanda network network, unofanirwa kushandisa PowerShell, iyo Azure CLI, kana ARM template kuita mabasa anodiwa.
Aya maitiro akanyorwa muMicrosoft's azure zvinyorwa. Mamwe malink anoratidza maitiro aya:
- Isa nePowershell pasi peiyo classic deployment modhi
- Shandisa nePowerShell pasi peiyo Resource Manager deployment modhi
- Shandisa neAzure CLI pasi peiyo Resource Manager deployment modhi
- Tumira nematemplate pasi peiyo Resource Manager deployment modhi
1.3Kutsigira kweAzure Boot Diagnostics Extension.
Iyo Azure Boot Diagnostics yekuwedzera inogona kusashanda nemazvo neNetgate® pfSense ® Plus software yechishandiso cheAzure.
Matambudziko akataurwa nekushanda uku panguva yekuyedzwa kwechitupa chemudziyo. Kuedzwa kwakatevera kwakaratidza kuti yairatidzika kushanda mune mamwe mamiriro. Wakasununguka kuedza kugonesa boot diagnostics, asi haina kutsigirwa zviri pamutemo.
Saka nekudaro, ndapota usatange nhare dzekutsigira kana matikiti kana ukaona kuti Boot Diagnostics yekuwedzera haisi kushanda nemazvo neNetgate pfSense ® yako.
Uyezve yeAzure VM. Uyu ndiwo muganho unozivikanwa uye hapana mushonga unowanikwa kubva
Azure's customer support team kana Netgate's.
2.1Regional Market Kuwanikwa
Matafura ari pasi apa anomiririra kuwanikwa kwemusika wedunhu. Kana musika wedunhu waunoda usina kunyorwa, tarisa kuMicrosoft Regions kuwanikwa kana kuendesa tikiti rekutsigira zvakananga kuMicrosoft Azure.
Tafura 1: Microsoft Azure Inowanikwa Nzvimbo
| Market | pfSense Plus |
| Arumeniya | Available |
| Ositireriya | * |
| Ositiriya | Available |
| Bherarusi | Available |
| Bherujiyamu | Available |
| Bhuraziri | Available |
| Kanadha | Available |
| Kiroshiya | Available |
| Saipurasi | Available |
| Czechia | Available |
| Dhenimaki | Available |
| Esitoniya | Available |
| Finirendi | Available |
| Furanzi | Available |
| Jerimani | Available |
| Girisi | Available |
| Hangari | Available |
| India | Available |
| Ayarendi | Available |
| Itari | Available |
| Korea | Available |
| Rativhiya | Available |
| Liechtenstein | Available |
| Rituaniya | Available |
| Rukuzemubhogu | Available |
| Maruta | Available |
| Monako | Available |
| Netharenzi | Available |
| Nyuzirendi | Available |
| Noweyi | Available |
Tafura 1 - yakaenderera mberi kubva papeji yapfuura.
| Market | pfSense Plus |
| Porendi | Available |
| Putugaro | Available |
| Pota Riko | Available |
| Romaniya | Available |
| Rashiya | Available |
| Saudhi Arabhiya | Available |
| Sebhiya | Available |
| Sirovhakiya | Available |
| Sirovhinyiya | Available |
| Chamhembe Afrika | Available |
| Speini | Available |
| Siwidheni | Available |
| Siwizarendi | Available |
| Taiwan | Available |
| Teki | Available |
| Mubatanidzwa Arabhu Emeretsi | Available |
| Nyika dzakabatana | Available |
| Nyika dzakabatana | Available |
* Australia inyika inotungamirwa neMicrosoft yekutengesa kuburikidza nemamiriro ese ekutenga kwevatengi kunze kweiyo Enterprise Agreement yekutenga mutengi mamiriro.
2.2 Mibvunzo Inowanzo bvunzwa
2.2.11. Ndinofanira kuseta password kana kushandisa SSH kiyi panguva yeAzure mushandisi kupa?
Zvinokurudzirwa kuseta password. Izvi zvinopa mukana kune iyo WebGUI, nepo SSH kiyi inongobvumidza iwe kupinda kune SSH yekuraira kukurumidza. Zvizhinji zvekugadzirisa zvinhu muNetgate® pfSense ® Plus software zvinowanzodzorwa kuburikidza ne WebGUI. Kana iwe ukashandisa netsaona kiyi yeSSH pachinzvimbo, unogona kusarudza sarudzo yekuseta zvakare admin password pamenu yemeseji inooneka pauno ssh kune yako muenzaniso. Zvadaro the WebGUI password ichagadziriswazve ku "pfsense". Iwe unofanirwa kukurumidza kugadzirisa iyo admin password kune yakachengeteka kukosha kana iwe wabudirira kupinda mu WebGUI.
2.2.22. Iyo live update yesoftware inotsigirwa here?
Mavhezheni ari muchikamu che 2.2.x haafanire kuedza kuita kuti firmware upgrade iitwe. Mune ramangwana (pfSense 2.3 kana kuti gare gare), izvi zvinogona kuitika, asi parizvino hazvina kuongororwa uye hazvitsigirwe. Sezvo chaiyo system console isingawanikwe, yakanyatso kudzoreredza maitiro ekutadza panguva yekusimudzira ingave yakaoma kutsanangura. Iyo parizvino inokurudzirwa maitiro ekusimudzira ndeye backup iyo pfSense ® Plus config kubva pane iripo chiitiko uye kuidzoreredza pane imwe chiitiko chitsva kana kukwidziridzwa kuripo.
2.3Kutsigira Zviwanikwa
2.3.1Kutsigira Kwezvekutengeserana
Kuti uchengetedze mitengo yakaderera, software haina kuunganidzwa nerutsigiro rwekutsigirwa. Kune vashandisi vanoda rubatsiro rwekutengeserana, Netgate® Global Support inogona kutengwa pahttps://www.netgate.com/support.
2.3.2Rutsigiro Rwenharaunda
Rutsigiro rwenharaunda runowanikwa kuburikidza neNewgate Forum.
2.4Kuwedzera Zvishandiso
2.4.1Kudzidziswa kweNetgate
Kudzidziswa kweNetgate kunopa makosi ekudzidzira ekuwedzera ruzivo rwako rwepfSense ® Plus zvigadzirwa nemasevhisi. Kunyangwe iwe uchida kuchengetedza kana kuvandudza hunyanzvi hwekuchengetedza vashandi vako kana kupa rubatsiro rwakanyanya uye nekuvandudza kugutsikana kwevatengi vako; Kudzidziswa kweNetgate kwakakufukidzira.
https://www.netgate.com/training
2.4.2Resource Library
Kuti udzidze zvakawanda nezve mashandisiro emudziyo wako weNetgate uye nezvimwe zvinobatsira zviwanikwa, ita shuwa yekubhurawuza yedu Resource Library.
https://www.netgate.com/resources
2.4.3Mashandiro Enyanzvi
Tsigiro haifukidze mamwe mabasa akaomarara senge CARP gadziriso yedundancy pane akawanda mafirewall kana maseketi, network dhizaini, uye shanduko kubva kune mamwe mafirewall kuenda kupfSense ® Plus software. Zvinhu izvi zvinopihwa sehunyanzvi masevhisi uye zvinogona kutengwa nekurongwa zvinoenderana.
https://www.netgate.com/our-ervices/professional-services.html
2.4.4Community Options
Kana ukasarudza kusabhadharwa chirongwa chekutsigira, unogona kuwana rubatsiro kubva kune vanoshanda uye vanoziva pfSense nharaunda pamaforamu edu.
https://forum.netgate.com/
Zvinyorwa / Zvishandiso
 |
netgate pfSense Plus Firewall/VPN/Router yeMicrosoft Azure [pdf] User Manual Microsoft Azure, Chengetedza Gedhi, Microsoft Azure Chengetedzo Gedhi, pfSense Plus Firewall VPN Router yeMicrosoft Azure, pfSense Plus Firewall VPN Router. |
