Auto VPN, support creating and manage VPN connection from Central Management Console Support SDWAN path selection policy

The console port on NGAF (Next-Generation Firewall Appliance) is a serial interface that allows you to directly connect a console cable to the firewall for administrative access and configuration. This is an alternative to accessing the firewall through a network connection, which may not be available or practical in certain situations.

To access NGAF using the console port follow below steps:

1. Connect a console cable (RS-232) to the console port on the NGAF and to a console server or a computer with a serial port.

2. Set the console port settings on the NGAF. By default, the console port is set to 9600 baud, 8 data bits, no parity, 1 stop bit, and no flow control.

3. Power on the NGAF and wait for the boot process to complete.

4. Press the Enter key to access the console prompt.

5. Log in to the NGAF using the administrator credentials.

6. Follow the prompts to configure the NGAF as needed.

7. Exit the console session by pressing the Ctrl+C keys simultaneously.

The console port on a Sangfor NGAF serves several functions:

    Direct access to the device: It provides a physical connection to the NGAF's command-line interface (CLI), allowing you to manage and troubleshoot the device even if the web interface or network connectivity is unavailable.
    Initial configuration: During initial setup, the console port might be necessary for configuration tasks like setting the IP address, subnet mask, and gateway.
    Firmware updates: Some Sangfor NGAF models might permit firmware updates through the console port.
    Troubleshooting: In case of critical issues, the console port offers access to diagnostic logs and enables advanced troubleshooting commands.

Accessing NGAF with the Console Port

Important points before proceeding:

    Accessing the console port typically requires physical access to the NGAF device.
    Improper use of the CLI can lead to configuration errors and potential security risks.
    Always consult the Sangfor NGAF documentation or seek professional help if unsure about any commands or procedures.

General steps for console access:

    Gather necessary equipment:
        Console cable (RJ-45 to DB9 or USB adapter)
        Terminal emulation software (e.g., Putty, Tera Term)
        Serial port settings information (baud rate, parity, data bits, stop bits)
    Connect the console cable:
        Connect one end of the cable to the console port on the NGAF device.
        Connect the other end to the appropriate port on your computer (serial or USB adapter).
    Configure terminal emulation software:
        Set the serial port settings to match the NGAF device specifications.
        Save the configuration for future use.
    Start the terminal emulation software:
        Open the terminal emulation software.
        The NGAF CLI prompt should appear.
    Authenticate and use the CLI:
        Log in to the CLI using the administrator credentials.
        Refer to the Sangfor NGAF documentation for specific commands and procedures.

Additional notes:

    Some Sangfor NGAF models might require additional steps or specific commands to enable console access.
    Always document any changes made to the configuration via the CLI.
    Consider setting strong passwords for administrative access to both the web interface and CLI.

Only development, testing, and debugging may be done via the CONSOLE interface.
End users must log in to the console and utilize the networking interface to access the device.
The NGAF device's eth0 networking interface's default IP address is eth0 10.251.251.251/24.
If the computer is linked to the device's eth0 port, you must
To access the device gateway console, first set up a 10.251.251.0/24 network segment address on the PC. Then, launch a browser and type https://10.251.251.251.

1. Attach a console cable (RS-232) to a computer with a serial port, a console server, and the NGAF's console port.

2. Configure the NGAF's console port settings. The console port's default settings include 8 data bits, no parity, 1 stop bit, 9600 baud, and no flow control.

3. Turn on the NGAF and give it some time to finish booting up.

4. To open the console prompt, press the Enter key.

5. Enter the administrator credentials to access the NGAF.

6. As needed, configure the NGAF by following the prompts.

7. To end the console session, simultaneously hit the Ctrl and C keys.

The first is for out-of-band management, which allows you to access and control the devices even when the network or web interfaces are unavailable. This is typically utilized for first configuration or troubleshooting.

The second uses of the console port are for debugging and diagnostics, where it can be utilized to see logs, run diagnostic commands, and in certain situations, do sophisticated troubleshooting.
Some prerequisites for using console port are listed below:
- A USB to serial adapter or cable, or a PC with a serial port
- emulator software, such as TeraTerm, Putty, etc.
A console cable that works with the Sangfor NGAF gadget
- fixed to a certain baudrate of 115200, unless modified beforehand.
- Eight data bits
- Parity: Not present
- Stop portions: 1
- No flow control
It is advised to adhere to Sangfor NGAF-based guidelines.