This is place to learn how to configure your network, hostname and DNS servers.
You can find this feature in the menu system at the following location:
The ClearOS system can run in one of four different modes:
Standalone Mode - No firewall - for a standalone server without a firewall (for example, a file server)
Standalone Mode - for a standalone server with a firewall (for example, a public web server)
- for connecting your LAN
, DMZ, and/or HotLAN to the Internet
This is an undocumented mode which allows ClearOS to act as a transparent in-line bridge. To get it set
A hostname is the full name of your system. If you have your own domain, you can use a hostname like gateway.example.com, mail.example.com, etc. The hostname does require at least one period (.)
This is how you are known from the internet. It may be your poweredbyclear.com DDNS name or another name. It is used, for example, by OpenVPN when creating its client configs to say which FQDN the OpenVPN client should contact to make a connection.
Specify the Internet domain of this server. This is the domain name (e.g. example.com) of your organization and not the hostname of this server but it could also be the internal domain name that you want to use on your LAN. If you do not have your own domain then you can use one of the free dynamic DNS hostnames provided by the ClearSDN. Alternatively, you can also make one up: gateway.lan, mail.lan and use it internally only.
On DHCP and DSL/PPPoE connections, the DNS servers will be configured automatically for your IP Settings. Users with static IP addresses should use the DNS servers provided by your Internet Service Provider (ISP).
If you use automatic DNS servers they can be temporarily overridden until the next reboot. Or, If you un-check the Automatic DNS Servers box in the External interface, you can manually specify your DNS servers here.
If you are using Multi-WAN, please review the MultiWAN User Guide on the topic of DNS servers.
This is broken down into five normal sections, Ethernet, Virtual, VLAN, xDSL and Wireless. Some of the configuration is common between the sections. Sections will only show if interfaces of those types exist. Other sections such as Bonded will appear with manual configuration.
From this screen you can configure or delete interfaces or run speed tests on external interfaces.
If you delete a PPPoE interface it will revert to its underlying Ethernet Interface for reconfiguration.
Configuring Ethernet Interfaces
When configuring a network interface, the first thing you need to consider is the network role in IP Settings. Will this network card be used to connect to the Internet, for a local network, for a network with just server systems? The following network roles in IP Settings are supported in ClearOS and are described in further detail in the next sections:
On a standalone system, your network card should be configured with an external role, not a LAN
The external role provides a connection to the Internet. On a ClearOS system configured as a gateway, the external role is for your Internet connection. On a system configured in standalone mode, the external role is for connecting to your local area network.
On ClearOS, you can have more than one external interface configured for load balancing and automatic failover. See the Multi-WAN user guide for details.
The LAN (local area network) role provides network connectivity for your desktops, laptops and other network devices. LANs should be configured with an IP address range of 192.168.x.x, 172.16.x.x-172.31.x.x or 10.x.x.x. For example, you can configure your ClearOS LAN interface with the following settings:
In this example, all systems on your LAN would have IP addresses in the range of 192.168.2.2 to 192.168.2.254.
To avoid problems with VPN's and obscure networking issues, it is recommended to avoid the 192.168.0.0/24 and 192.168.1.0/24 subnets. Also avoid 10.8.0.0/24 and 10.8.10.0/24 as they clash with the default OpenVPN subnets.
Hot LAN (or “Hotspot Mode”) allows you to create a separate LAN network for untrusted systems. Typically, a Hot LAN is used for:
A Hot LAN is able to access the Internet, but is not able to access any systems on a LAN. As an example, a Hot LAN can be configured in an office meeting room used by non-employees. Users in the meeting room could access the Internet and each other, but not the LAN used by company employees.
The firewall port forwarding page in webconfig is used to forward ports to both LANs and Hot LANs.
Only one Hot LAN
In ClearOS, a DMZ interface is for managing a block of public Internet IP addresses. If you do not have a block of public IP addresses, then use the Hot LAN role of your IP Settings. A typical DMZ setup looks like:
Webconfig has a DMZ firewall configuration page to manage firewall policies on the DMZ network.
For most cable and Ethernet networks, DHCP is used to connect to the Internet. In addition, your system will have the DNS servers automatically configured by your ISP when the Automatic DNS Servers checkbox is set.
If you have an upstream proxy on your external interface you can configure it here.
You will rarely want to have an LAN interface configured as DHCP.
PPPoE (for xDSL)
For PPPoE xDSL connections, you will need the username and password provided by your ISP.
If you have an ADSL external connection, an MTU of 1492 is often to avoid issues speed and connectivity issues. 1500 is probably fine for VDSL.
If you have a static IP, you will need to set the following parameters:
For a LAN interface you will almost always want it to be static.
Automatic DNS Servers
For interface types DHCP and PPPoE the Automatic DNS Servers checkbox is set. If you would like to configure your own DNS servers (often required for Multi-WAN) then leave this setting unchecked.
Upstream and Downstream Bandwidths
You can set them manually here or on the previous scree you can run a speed test on the interface by clicking on the speedtest icon:
If you have an upstream proxy on your external interface you can configure it here.
Configuring Virtual Interfaces
ClearOS supports virtual IPs. To add a virtual IP address, click on the link to configure a Virtual Interface and add specify the interface you want the IP address to be associated with, the IP Address and Netmask. ClearOS will determine the interface Role from the interface it is associated with. You will also need to create custom firewall rules if the virtual IP is on the Internet.
Though you can access this virtual IP address on the ClearOS system, it is not possible to use a virtual IP as a LAN
Can be internal or external. You need to decide the NIC which the VLAN belongs to and allocate it's VLAN ID. Other settings are the normal Connection Type, IP Address, Netmask, Gateway, Enable DHCP Server, Automatic DNS Servers.
Configuring a Wireless Interface
The Wireless section allows you to set specific Wireless options in addition to the normal ones. The interface can only be used to configure 802.11g networks. Many settings are similar to the Ethernet settings
If you have a wireless NIC attached and you can see it here and you don't see any wireless options you may need to install the wireless options manually with:
yum install app-wireless-core
If you do not see the Wireless interface at all, you will need to troubleshoot the NIC drivers.
If you want to configure 802.11n or 802.11ac you will need to edit /etc/hostapd/hostapd.conf manually.
Choose between WEP (do not use in AP mode), WPA/PSK and WPA infrastructure (Radius).
External interfaces must be WEP
This is the ID that will show as the network available when people search for wireless access points from their computer. Users will need to know this information as well in order to connect. You can use any UTF-8 characters for this field.
Passphrase/RADIUS Shared Secret
Depending on which mode you select, this will be the key used to authenticate users to the wireless or the wireless to the RADIUS server. You should only use ASCII characters for this field.
If you switch to WPA Infrastructure mode then any Passphrase you had will be used for your Rasius Shared Secret, but the setting will disappear from the webconfig!
Either specify the 802.11g channel to use. Automatic does not appear to do anything in AP mode and used the previously selected channel
The two network cables coming from your box may need to be swapped. If you are having a hard time connecting to the Internet, make sure you try swapping the cables.
In most installs, the network cards and IP settings will work straight out of the box. However, getting the network up the first time can be an exercise in frustration in some circumstances. Issues include;
Network card compatibility
Invalid networks settings (username, password, default gateway)
Finicky cable/DSL modems that cache network card hardware information
Here are some helpful advanced tools and tips to diagnose a network issue from the command line:
displays links status, speed, and many other stats - not all cards support this tool