Install Dimension on Proxmox

Applies To: Locally-managed Fireboxes This topic applies to Fireboxes you configure in Policy Manager or Fireware Web UI.

WatchGuard Dimension is distributed as an .OVA file for installation on Proxmox Virtual Environment (VE). For information about supported Proxmox versions, go to the WatchGuard Dimension Release Notes.

For information about Dimension system memory allocation and disk size, go to Install WatchGuard Dimension.

Before You Begin

Before you can deploy the Dimension .OVA file to Proxmox VE, you must:

• Download the WatchGuard Dimension .OVA file.
  From the WatchGuard Software Downloads Center, find and download the file to install WatchGuard Dimension on your Proxmox VE host.
• Have a DHCP server configured in the network you choose for the Dimension virtual machine if you want to use a DHCP server to get the initial IP address for Dimension. You can also manually set a static IP address for Dimension. You then use this initial IP address to connect to Dimension to run the Dimension Setup Wizard and complete your Dimension configuration.
• Install Proxmox VE on a device. Before you can create a Proxmox VE host for Dimension, you must first install and configure Proxmox VE on a device. For more information, go to the Proxmox documentation:
  • Proxmox System Requirements
  • Proxmox — Get Started

Create a Proxmox VE Host for Dimension

To create a host for the Dimension virtual machine, from the Proxmox VE web UI:

1. From the left sidebar, select the node where you want to create the virtual machine.
2. Click Create VM from the toolbar.
   The Create Virtual Machine window opens.
3. Select the General tab.
4. From the Node drop-down list, select a node.
5. From the VM ID drop-down list, select an ID.
6. In the Name text box, enter a name.
7. Keep the default value in the Resource Pool drop-down list.

8. Click Next.
   The OS tab opens.
9. Select Do Not Use Any Media.
10. In the Guest OS section, from the Type drop-down list, select Linux.
11. From the Version drop-down list, select 6.x - 2.6 Kernel.
12. Click Next.
    The System tab opens.
13. From the Graphic Card drop-down list, select Default.
14. From the Machine drop-down list, select Default.
15. From the BIOS drop-down list, select Default.
16. From the SCSI Controller drop-down list, select a controller.
17. Click Next.
    The Disks tab opens.
18. From the Bus/Device drop-down list, select a device.
19. In the Disk Size text box, enter 0.
20. Click Next.
    The CPU tab opens.
21. In the Sockets text box, enter 1.
22. In the Cores text box, enter 1.
23. From the Type drop-down list, select x86-64-v2-AES.

24. Click Next.
    The Memory tab opens.
25. From the Memory drop-down list, select 4096.
26. Click Next.
    The Network tab opens.
27. From the Bridge drop-down list, select your network bridge.
28. From the Model drop-down list, select your model.
29. Click Next.
    The Confirm tab opens.
    
30. Review the configuration settings and click Finish.

Deploy the Dimension Virtual Machine

When you deploy the OVF template to install the Dimension VM, the template automatically configures the amount of system memory for the VM. If you manually change the system memory value in the VM settings, make sure to specify a value of 4GB or higher.

To deploy the Dimension virtual machine to the Proxmox VE host:

1. Get the .OVA file from the WatchGuard Software Downloads Center.
2. Configure a Secure Shell (SSH) session from your computer to the Proxmox VE host. For more information, go to Connect Using SSH (external link).
3. Upload the watchguard-dimension_2_3.ova file to the Proxmox/tmp directory.
   scp /path/to/local/file user@proxmox_ip_address:/tmp/
4. Log in to the Proxmox VE web UI at: https://<IP address of the Promox VE host>:8006
5. Click Shell and run this command:
   tar xvf watchguard-dimension_2_3.ova
   This command extracts .ovf, .mf, and .vmdk files.
6. In the Shell window, run these commands to convert the .VMDK files to the QEMU Copy-on-Write (QCOW2) format:
   • qemu-img convert -f vmdk watchguard-dimension_2_3-disk1.vmdk -O qcow2 disk1.qcow2
   • qemu-img convert -f vmdk watchguard-dimension_2_3-disk2.vmdk -O qcow2 disk2.qcow2

7. In the Shell window, run these commands to import the QCOW2 disks:
   • qm importdisk <vmid> disk2.qcow2 <storage> -format qcow2
   • qm importdisk <vmid> disk1.qcow2 <storage> -format qcow2

   vmid is the ID of your virtual machine, and storage is the storage location of the virtual machine.

8. In the Proxmox VE web UI of the host, select Hardware and verify that the unused disks are listed.
9. Select each of the QCOW2 disks to attach them to the virtual machine.

10. From Hardware > Options > Boot Order, edit the boot order to prioritize the boot disk. In most cases, disk1 is the boot disk.
11. Start the Dimension virtual machine.

Find the External IP Address

If the external network has a DHCP server, the Dimension external interface is automatically assigned an IP address. To find the IP address to connect to Dimension, you can use the Dimension VM command line.

The first time you make a console connection to Dimension, you must change the default password for the wgsupport user.

To use the command line to find the IP address for Dimension:

1. From Proxmox VE, select the Dimension VM.
2. From the Dimension VM, select Console.
3. Click Start Now to start a console connection to your Dimension VM.

4. At the login prompt, type wgsupport. Press Enter on your keyboard.
5. At the passphrase prompt, type readwrite. Press Enter on your keyboard.
   This is the default admin account passphrase. A prompt to change the password opens.
6. Type the new passphrase to use for the wgsupport account. Press Enter on your keyboard.
   The passphrase is changed.
7. Record the IP address that shows on the screen. If the IP address does not show for the external interface, type ifconfig. Press Enter on your keyboard.
   The IP address for the external interface appears.
8. To log out, type exit. Press Enter on your keyboard.

If you cannot manage the Dimension server from Proxmox VE, make sure that IP forwarding is enabled and set the Promiscuous Mode of the network to Accept.

Set a Static IP Address for Dimension

If you do not have a DHCP server, you must set a static IP address for the Dimension external interface. This is the IP address you use to connect to Dimension and run the Dimension Setup Wizard. To set a static IP address, you make a console connection to Dimension with the wgsupport credentials and specify the IP address for the Eth0 interface.

The command tool that you use to change the IP address is located in the /opt/watchguard/dimension/bin directory. To change the IP address, you must specify this directory, run the wg_ip_addr.sh command, and type the new IP address and default gateway for the interface.

To make a console connection to Dimension and configure Dimension with a static IP address:

1. From Proxmox VE, select the Dimension VM.
2. From the Dimension VM, select Console.
3. Click Start Now to start a console connection to your Dimension VM.
4. At the login prompt, type wgsupport. Press Enter on your keyboard.
5. At the passphrase prompt, type your passphrase. If previously unchanged, the default is readwrite. Press Enter on your keyboard.
   
6. To set the static IP address for Dimension, at the command line, type:

/opt/watchguard/dimension/bin/wg_ip_addr.sh -i <IP address> -m <mask> -g <gateway>.

For example, to configure Dimension with a static IP address of 203.0.113.201/24 and a gateway of 203.0.113.1, type:

/opt/watchguard/dimension/bin/wg_ip_addr.sh -i 203.0.113.201 -m 24 -g 203.0.113.1.

7. Press Enter on your keyboard.

Run the WatchGuard Dimension Setup Wizard

After your Dimension VM is set up and powered on, you can connect to Dimension to run the Dimension Setup Wizard and complete the configuration for your Dimension system.

Before you start the Setup Wizard, make sure you have this information to add in the wizard:

• Host name for Dimension Tip! If you have an internal DNS server configured that can assign a host name to Dimension, you can specify that host name in the Dimension Setup Wizard. If you do not have a DNS server to use with Dimension, you can keep the default host name setting of "localhost".
• IPv4 settings for the Eth0 interface
• Log Authentication Key
• Administrator passphrase

To run the Dimension Setup Wizard:

1. Open a web browser and connect to Dimension at https://<Dimension IP address>.
   For example, if the IP address assigned to your instance of Dimension is 203.0.113.201, you connect to Dimension at https://203.0.113.201.
   The login page opens.
2. Type the default user credentials:
   • User Name – admin
   • Passphrase – readwrite

You can change the administrator passphrase when you run the Setup Wizard.

3. Complete the wizard to configure Dimension.
   After you finish the wizard, the Dimension login page opens.
4. To log in to Dimension, use the new administrator passphrase that you specified in the wizard.

After you have completed the wizard and logged in to Dimension, you can complete the configuration settings for your Dimension system and Log Server, create report schedules, and manage users, as described in these topics:

• Manage Dimension System Settings
• Dimension Server Management
• Schedule Dimension Reports
• Manage Dimension Users and Groups

Related Topics

Install WatchGuard Dimension

Set Up & Administer Dimension

Manage Dimension System Settings