The management interface is the port through which the Central Management System instance is managed and administered. It is also the port through which integration of the Central Management System instance and managed appliances is managed.
Important
If you use DHCP, make sure the lease is persistent to maintain the connection with the managed appliances.
Initial settings need to be configured to set up the management interface and to allow access to the network, change the default admin password, and so on.
To perform the initial configuration of a Central Management System instance:
Use one of the following methods to log in.
Password authentication:
Open the console for the virtual appliance in the Azure portal.
At the login prompt, enter
admin.At the password prompt, enter
admin.When prompted to change the password, go to CLI configuration mode and create another password:
hostname > en hostname # configure terminal hostname (config) # username admin password <new password>The system will log you out.
Log in using the new password.
SSH public key authentication:
Open an SSH client.
Log in using the SSH public key. For example,
ssh -i <SSH key> admin@<IP address>
Accept the license agreement. The configuration jump-start wizard starts.
Answer the wizard questions as described in the following table.
Step | Response |
|---|---|
Enter activation code? | Enter the activation code for the appliance. |
Hostname? | Enter the hostname for the appliance. |
Admin password? | (Optional) Enter a new administrator password. |
Confirm admin password? | Re-enter the new administrator password. |
Enable remote access for 'admin' user? | Enter yes to enable the administrator to log in to the appliance remotely. Enter no to disable remote access. |
Use DHCP on ether1 interface? | Enter yes to use Dynamic Host Configuration Protocol (DHCP) to configure the appliance IP address and other network parameters. If you enter yes, the ether1 interface will obtain its IP address from the default Azure ether1 interface. (If you enter yes, the zeroconf and static IP addressing steps are skipped.) Enter no to manually configure your IP address and network settings. |
Use zeroconf on ether1 interface? | Enter yes to use zero-configuration (zeroconf) networking. Enter no to specify a static IP address and network mask. (If you specify yes, the next step is skipped.) NOTE: Do not use zeroconf on the primary interface. |
Primary IP address and masklen? | Enter the IP address for the management interface in A.B.C.D format and enter the network mask (for example, 1.1.1.2 /24). ImportantEnter the IP address that Azure assigned to the ether1 interface. |
Default gateway? | Enter the gateway IP address for the management interface. |
Primary DNS server? | Enter the IP address of the DNS server. |
Domain name? | Enter the domain for the management interface (for example, it.acme.com). |
Enable fenet service? | Enter yes to enable access to the DTI network. (If you enter no, the next three steps are skipped.) |
Enable fenet license update service? | Enter yes to enable the licensing service to automatically download your licenses from the DTI network and install them. (If licenses are downloaded and installed successfully, the wizard skips the step that prompts for the product license key and the step that prompts for the security-content updates key.) |
Sync appliance time with fenet? | Enter yes to synchronize the appliance time with the DTI server time. If you enabled the licensing service, synchronization prevents a feature from being temporarily unlicensed due to a time gap. The wizard makes three attempts to perform this step before it gives up and moves to the next step. |
Update licenses from fenet? | Enter yes to download and install your licenses. The wizard makes three attempts to perform this step before it gives up and moves to the next step. |
Enable NTP? | Enter yes to enable automatic time synchronization with one or more Network Time Protocol (NTP) servers. Enter no to manually set the time and date on the appliance. (This step is skipped if you entered yes in the "Sync appliance time with fenet?" step.) If you enter no, specify the time and date in subsequent steps. |
Enable FaaS VPN? | Enter yes to enable the appliance to connect to Managed Defense (formerly called Trellix as a Service) over the Internet using a secure SSL VPN connection. (This step is skipped if no MD_ACCESS license is installed.) |
Set time (<hh>:<mm>:<ss>)? | Enter the appliance time in Greenwich Mean Time (GMT) (UTC+0). (This step and the next step are skipped if you entered yes in the "Sync appliance time with fenet?" or "Enable NTP?" step. |
Set date (<yyyy>/<mm>/<dd>)? | Enter the appliance date in Greenwich Mean Time (GMT) (UTC+0). |
Enable IPv6? | Enter yes to enable IPv6 protocol, which changes network IP routing from IPv4 to IPv6. This step and the next two steps will be automatically performed if you entered yes in the "Enable FaaS VPN" step.) |
Enable IPv6 autoconfig (SLAAC) on ether1 interface? | Enter yes to enable IPv6 autoconfig on the ether1 (management interface) port. (This step is skipped if you entered no in the "Enable IPv6?" step.) |
Enable DHCPv6 on ether1 interface? | Enter yes to use DHCPv6 to configure IPv6 hosts with IP addresses. (This step is skipped if you entered no in the "Use DHCP on ether1 interface?" or "Enable IPv6?" step.) |
Configure CMS HA? | Enter no. NoteIf you are configuring Central Management System HA in an Azure deployment, use the procedures and configuration jump-start information described in Deploying a Virtual Central Management System High Availability Cluster in Microsoft Azure |
Product license key? | Enter the product license key you obtained from Trellix, or press Enter to install a 15-day evaluation license. (This step and the next step are skipped if you entered yes in the "Enable fenet license update service?" step and if licenses were successfully installed as a result.) |
Security-content updates key? | Enter the security-content license key you obtained from Trellix, or press Enter to skip this step and install the license later. |
: