คู่มือผู้ใช้ Netgate XG-7100 1U pfSense Security Gateway

1. บทนำ

The Netgate XG-7100 1U is a state-of-the-art Security Gateway appliance designed for robust network security. Featuring the 4 Core Intel Atom C-3558 processor, it provides high I/O throughput and optimal performance for various network applications. This appliance, powered by pfSense software, can function as a firewall, LAN/WAN router, VPN appliance, DHCP Server, DNS Server, and includes IDS/IPS capabilities with optional packages.

Built for performance, versatility, and low total cost of ownership, Netgate systems with pfSense software are suitable for organizations of all sizes.

คุณสมบัติหลัก:

• Official Netgate pfSense 1U rack mount security gateway, with 8GB RAM and 32GB eMMC Storage.
• Intel Denverton C3558 4 cores 2.2 GHz processor.
• Networking includes 2x 10GbE Intel x553 SFP+ Ports and an 8-port 1Gbps Marvell 88E6190 switch.
• Ideal for medium to large sized networks, branch offices, Managed Service Providers (MSP) / Managed Security Service Provider (MSSP) On Premises Appliance; Anyone with High-Speed 10 Gigabit and/or 1 Gigabit Connections; Anyone with many VPN Connections; Anyone with high speed connections who wish to configure IDS/IPS features.
• pfSense is a free, open-source firewall and router platform based on FreeBSD, offering competitive features to proprietary commercial firewalls.
• Low total cost of ownership due to low power requirements, long deployment lifetime, and no artificial limits or add-ons for full functionality.

Figure 1: Netgate XG-7100 1U Security Gateway highlighting its core functions.

2. คู่มือการติดตั้ง

This section provides instructions for the initial setup of your Netgate XG-7100 1U Security Gateway.

2.1 การแกะบรรจุภัณฑ์และการตรวจสอบ

Carefully remove the XG-7100 1U appliance from its packaging. Inspect the unit for any signs of physical damage that may have occurred during shipping. Ensure all components listed in the packing slip are present.

2.2 การติดตั้งทางกายภาพ

The XG-7100 1U is designed for rack mounting. Secure the unit in a standard 19-inch server rack using appropriate rack rails or mounting hardware (not included unless specified).

รูปที่ 2 : ด้านหน้า view of the Netgate XG-7100 1U, showing network ports, USB ports, and console port.

รูปที่ 3: ด้านหลัง view of the Netgate XG-7100 1U, showing the power input and cooling fan exhausts.

2.3 การต่อสายไฟ

1. Ensure the power switch on the rear of the unit is in the OFF position.
2. Connect the provided power cord to the IEC320-C14 inlet on the rear of the appliance.
3. เสียบปลายอีกด้านของสายไฟเข้ากับเต้ารับไฟฟ้าที่มีสายดิน
4. Flip the power switch to the ON position. The power LED on the front panel should illuminate.

2.4 การเชื่อมต่อเครือข่าย

Identify the appropriate network ports for your configuration. The XG-7100 1U features 2x 10GbE SFP+ ports and 8x 1Gbps Ethernet ports.

• การเชื่อมต่อ WAN: Connect your internet service provider's modem or router to one of the designated WAN ports (typically the first Ethernet port or an SFP+ port, depending on your pfSense configuration).
• การเชื่อมต่อ LAN: Connect your internal network devices (switches, computers) to the LAN Ethernet ports.
• พอร์ต SFP+: Use these for high-speed fiber optic connections to other network devices or for high-bandwidth WAN connections. Note that copper SFP/SFP+ modules are not supported.

2.5 การเข้าถึงการกำหนดค่าเริ่มต้น

To access the pfSense web interface for initial configuration:

1. Connect a computer directly to one of the LAN ports of the XG-7100 1U.
2. Ensure your computer is configured to obtain an IP address automatically via DHCP. The XG-7100 1U typically acts as a DHCP server on its LAN interface by default.
3. เปิด web browser and navigate to the default pfSense web interface IP address (commonly http://192.168.1.1).
4. Log in using the default credentials (refer to pfSense documentation for default username and password, typically 'admin' and 'pfsense').
5. Follow the pfSense setup wizard to configure your network settings, including WAN and LAN interfaces, DNS, and administrator password.

For detailed software configuration, refer to the official pfSense documentation available online.

3. การดำเนินการ

The Netgate XG-7100 1U, running pfSense software, offers a wide range of functionalities for network management and security.

3.1 Web การจัดการ GUI

All management of the pfSense Plus software settings is performed through its intuitive web-based Graphical User Interface (GUI). This allows for easy configuration without the need for command-line interaction.

รูปที่ 4: เกินview of the pfSense Plus software interface.

3.2 ฟังก์ชันหลัก

The XG-7100 1U can be configured to perform various critical network roles:

• ไฟร์วอลล์: Stateful packet filtering to control network traffic.
• เราเตอร์ : LAN and WAN routing capabilities.
• VPN Appliance: Supports IPsec and OpenVPN for secure remote access and site-to-site connections.
• เซิร์ฟเวอร์ DHCP: Automatically assigns IP addresses to devices on your network.
• เซิร์ฟเวอร์ DNS: Resolves domain names to IP addresses.
• ไอดีเอส/ไอพีเอส: Intrusion Detection/Prevention System for enhanced security (with optional packages like Snort or Suricata).
• Load Balancer: Distributes network traffic across multiple servers for improved performance and reliability.
• การปรับการจราจร: Prioritizes certain types of network traffic.
• พอร์ทัลเชลย: For guest network access control.
• Web การกรองเนื้อหา: Through proxies like SquidGuard.

Figure 5: Comprehensive list of pfSense Plus software features.

3.3 Performance Capabilities

The XG-7100 1U is engineered for high performance, capable of handling demanding network loads.

Figure 6: Performance benchmarks of the Netgate XG-7100 1U.

• Router Throughput: สูงสุดถึง 18.6 Gbps.
• Firewall Throughput: สูงสุดถึง 6.81 Gbps.
• IPsec VPN Throughput: สูงสุดถึง 1.28 Gbps.
• Supports up to 14 independent and switched ports, delivering up to 6.2 Gbps / 2.1 Mpps of enterprise-grade IMIX traffic throughput.
• Intel AES-NI compatibility ensures data encryption without compromising throughput.

4. การบำรุงรักษา

Regular maintenance ensures the optimal performance and longevity of your Netgate XG-7100 1U.

4.1 การอัปเดตซอฟต์แวร์

It is highly recommended to keep your pfSense Plus software updated to the latest stable version. Updates often include security patches, bug fixes, and new features.

• Access the pfSense web GUI
• นำทางไปที่ System > Update.
• Check for available updates and follow the on-screen instructions to apply them.
• Always back up your configuration before performing major updates.

4.2 การบำรุงรักษาฮาร์ดแวร์

• การทำความสะอาด: Periodically clean the exterior of the unit with a soft, dry cloth. Ensure ventilation openings are free from dust and obstructions to maintain proper airflow.
• เช็คพัดลม: The unit features low-noise active control chassis fans. Ensure they are operating correctly and not obstructed.
• สภาพแวดล้อม : Operate the device within the specified environmental conditions (0°C to 60°C operating temperature; 8% to 90% operating relative humidity non-condensing) to prevent overheating or damage.

4.3 การสำรองข้อมูลการกำหนดค่า

Regularly back up your pfSense configuration. This allows for quick restoration in case of data loss or system issues.

• In the pfSense web GUI, navigate to Diagnostics > Backup/Restore.
• Download a copy of your configuration file ไปยังสถานที่ที่ปลอดภัย

5 การแก้ไขปัญหา

This section provides solutions to common issues you might encounter with your Netgate XG-7100 1U.

5.1 ไม่มีไฟฟ้า

• Ensure the power cord is securely connected to both the appliance and the electrical outlet.
• Verify the power switch on the rear of the unit is in the ON position.
• ตรวจสอบว่าเต้ารับไฟฟ้าใช้งานได้หรือไม่โดยเสียบอุปกรณ์อื่นเข้าไป
• If the power LED does not illuminate, contact Netgate support.

5.2 ไม่สามารถเข้าถึงได้ Web กุ้ยช่าย

• Ensure your computer is connected to a LAN port of the XG-7100 1U and is obtaining an IP address via DHCP.
• Verify you are using the correct IP address for the pfSense web GUI (default is http://192.168.1.1).
• Check your computer's network settings to ensure there are no conflicting static IP addresses or firewall rules blocking access.
• Try accessing the GUI from a different web browser or computer.
• If you have changed the default LAN IP address and forgotten it, you may need to connect via the console port for recovery.

5.3 ไม่มีการเชื่อมต่ออินเทอร์เน็ต

• Check the physical connection of the WAN cable to the XG-7100 1U and your modem/router.
• Verify the WAN interface status in the pfSense web GUI. Ensure it has obtained an IP address from your ISP.
• Check your ISP's modem/router for internet connectivity.
• Review your pfSense firewall rules to ensure they are not blocking outbound internet traffic.
• Restart the XG-7100 1U and your modem/router.

5.4 ปัญหาประสิทธิภาพของระบบ

• Monitor CPU and memory usage in the pfSense dashboard. High utilization may indicate a bottleneck.
• Ensure the unit has adequate ventilation and is not overheating.
• Review your firewall rules and installed packages. Complex rulesets or resource-intensive packages (e.g., IDS/IPS with many rules) can impact performance.
• Consider upgrading RAM if consistently experiencing high memory usage (expandable to 24GB).

6. ข้อมูลจำเพาะทางเทคนิค

Detailed specifications for the Netgate XG-7100 1U pfSense Security Gateway:

Figure 7: Hardware specifications of the Netgate XG-7100 1U.

7. การรับประกันและการสนับสนุน

For detailed warranty information and technical support, please refer to the official Netgate webหรือติดต่อฝ่ายบริการลูกค้าโดยตรง

• เป็นทางการ Webเว็บไซต์: เยี่ยม www.netgate.com for the latest documentation, FAQs, and support resources.
• การสนับสนุนด้านเทคนิค: Contact Netgate support for assistance with hardware issues, software configuration, or troubleshooting beyond the scope of this manual.
• ฟอรั่มชุมชน: The pfSense community forums are an excellent resource for peer-to-peer support and general inquiries.