User Tools

Site Tools


cyberoam

Cyberoam Basics

Cyberoam Cheat Sheet for the GUI

Configure Cyberoam using the Wizard

Cyberoam Wizard
Prior to configuring the Cyberoam you need to decide if you would like to use the Cyberoam in BRIDGE mode of GATEWAY mode.

In BRIDGE mode the Cyberoam can be transparent except when using the Captive Portal.

  • Traffic will pass through the cyberoam depending on firewalls rules used.
  • Network Address Translation (NAT) is not needed

In GATEWAY mode

  • The cyberoam will do the routing between networks
  • The cyberoam will need to NAT traffic

Cyberoam Configuation as Captive Portal

After the MODE had has been chosen, to continue configuring the cyberoam for use as a captive portal, follow the following steps. These steps will bring the cyberoam up in bridge mode, and have the captive portal working. (Minimal Configuration)

Configure Time and NTP

To keep reports that are sent to satNAG in the same timezone, please set the cyberoams to UTC.

Configure Networks

Objects→ Hosts→ IP HOSTS

Added offship_network  192.168.2.0/24
Added data_network     192.168.1.0/24

Configure User Group

Identity→ Groups→ Users

create offshipUsers

This is where you would assign Web and/or Application Filters to the Users. Add a couple of users; Identity→Users→Add

It is helpful to use the same syntax you would use for adding users to the ship email system or LDAP or RADIUS server, when adding the users assign them to the group offshipUsers created above.

Configure Firewall Rules

Firewall→Rule→ Add

create Rule to allow all DNS

Depending on where your DNS and/or DHCP server reside, you will probably want to allow all DNS and DHCP traffic to pass through the device

Enable Captive Portal

Change LAN_WAN_AnyTraffic Firewall rule to DROP

SatNAG Recommended Configuration

Web Filter Configuration

Application Filter Configuration

SatNAG Reports

Using SatNAG MailServer

Configuring SatNAG MailServer for sending Metric reports to SatNAG.

cyberoam.txt · Last modified: 2019/06/20 14:28 by 128.128.228.7