Installation Steps for Ubuntu 18 Installation Steps

Wanguard and Wansight can be installed quickly and easily with the APT package manager. The software runs exclusively on 64-bit Intel or AMD architectures. All packages were tested on a stock Ubuntu Server 18.04 LTS. This distribution will receive OS updates until April 2028 with a Ubuntu Pro subscription. Below you can find the installation steps for Console, Sensor and Filter.

USER GUIDES:	Wanguard 8.4 User Guide
	Wansight 8.4 User Guide

CONSOLE INSTALLATION STEPS:	Step 1. Install the Andrisoft repository First, add the Andrisoft repository to APT. ubuntu:~# apt install apt-transport-https wget ubuntu:~# wget --no-check-certificate -O - https://www.andrisoft.com/andrisoft.gpg.key \| apt-key add - ubuntu:~# echo "deb https://packages.andrisoft.com bionic main" > /etc/apt/sources.list.d/andrisoft.list Step 2. Install the packages Install the wanconsole package and its dependencies. Configure and start ntpd to prevent clock de-synchronization issues. ubuntu:~# apt update ubuntu:~# apt install wanconsole ubuntu:~# systemctl restart ntp ubuntu:~# systemctl enable ntp Step 3. Configure the MySQL service By default MySQL is bound to the loopback interface, so you should comment the bind-address line. Also, make sure you add sql-mode="NO_ENGINE_SUBSTITUTION" line. If you deploy Sensors or Filters on remote systems, make sure that the MySQL server is accessible by opening port tcp/3306 in the firewall. ubuntu:~# nano /etc/mysql/mysql.conf.d/mysqld.cnf #comment the bind-address directive, set max_connections=1000, max_allowed_packet=256M, and add skip-name-resolve, open_files_limit=5000, log_error_verbosity=2 and sql-mode="NO_ENGINE_SUBSTITUTION" in the [mysqld] section ubuntu:~# systemctl restart mysql Step 4. Reload the Apache service Reload the PHP configuration by restarting the Apache service. ubuntu:~# systemctl restart apache2 Step 5. Install the database Finish installing the Console by running the /opt/andrisoft/bin/install_console script. Enter the MySQL root password, and provide a password for a new database named "andrisoft". In Ubuntu 18, the recommended database storage engine is MyISAM. ubuntu:~# /opt/andrisoft/bin/install_console Step 6. Configure the WANsupervisor service The WANsupervisor daemon must be installed and started on all systems. You have to run the /opt/andrisoft/bin/install_supervisor script to enter the Console's IP address and database password you set on step 5. ubuntu:~# /opt/andrisoft/bin/install_supervisor ubuntu:~# systemctl start WANsupervisor ubuntu:~# systemctl enable WANsupervisor Step 7. Install InfluxDB Install influxdb from https://portal.influxdata.com/downloads or from the link listed below and execute /opt/andrisoft/bin/install_influxdb to initialize the influxdb database. ubuntu:~# wget https://dl.influxdata.com/influxdb/releases/influxdb_1.8.10_amd64.deb ubuntu:~# dpkg -i ./influxdb_1.8.10_amd64.deb ubuntu:~# cp /etc/influxdb/influxdb.conf /etc/influxdb/influxdb.conf.backup ubuntu:~# cp /opt/andrisoft/etc/influxdb.conf /etc/influxdb/influxdb.conf ubuntu:~# systemctl restart influxdb ubuntu:~# /opt/andrisoft/bin/install_influxdb Step 8. Access the Console The Console web interface is accessible by pointing your web browser to http://<hostname>/wanguard or http://<hostname>/wansight, where <hostname> is the name of the server running the Console. The default username is "admin" with the password "changeme". It is highly recommended to install an SSL certificate in Apache to be able to connect securely to Console via HTTPS.

SENSOR INSTALLATION STEPS:	Step 1. Install the Andrisoft repository Add the Andrisoft repository to APT. You can skip these installations steps on the Console server. ubuntu:~# apt install apt-transport-https wget ubuntu:~# wget --no-check-certificate -O - https://www.andrisoft.com/andrisoft.gpg.key \| apt-key add - ubuntu:~# echo "deb https://packages.andrisoft.com bionic main" > /etc/apt/sources.list.d/andrisoft.list Step 2. Install the packages Install the wansensor package and dependencies. Configure and start ntpd to prevent clock de-synchronization issues. ubuntu:~# apt update ubuntu:~# apt install wansensor ubuntu:~# systemctl restart ntp ubuntu:~# systemctl enable ntp Step 3. Install, configure and start the WANsupervisor service This step is required if you haven't previously installed and configured WANsupervisor on the target system. In order to configure the WANsupervisor service, you have to run the /opt/andrisoft/bin/install_supervisor script to enter the Console IP address and database password. ubuntu:~# /opt/andrisoft/bin/install_supervisor ubuntu:~# systemctl start WANsupervisor ubuntu:~# systemctl enable WANsupervisor Step 4. Setup the Sensor Log into the Console to setup the Sensor(s). Sensors are started, monitored and stopped by the WANsupervisor daemon, so make sure the WANsupervisor service is always running.

FILTER INSTALLATION STEPS:	Step 1. Install the Andrisoft repository Add the Andrisoft repository to APT. You can skip these installations steps on the Console server. ubuntu:~# apt install apt-transport-https wget ubuntu:~# wget --no-check-certificate -O - https://www.andrisoft.com/andrisoft.gpg.key \| apt-key add - ubuntu:~# echo "deb https://packages.andrisoft.com bionic main" > /etc/apt/sources.list.d/andrisoft.list Step 2. Install the packages Install the wanfilter package and dependencies. Configure and start ntpd to prevent clock de-synchronization issues. ubuntu:~# apt update ubuntu:~# apt install wanfilter ubuntu:~# systemctl restart ntp ubuntu:~# systemctl enable ntp Step 3. Install, configure and start the WANsupervisor service This step is required if you haven't previously installed and configured WANsupervisor on the target system. In order to configure the WANsupervisor service, you have to run the /opt/andrisoft/bin/install_supervisor script to enter the Console IP address and database password. ubuntu:~# /opt/andrisoft/bin/install_supervisor ubuntu:~# systemctl start WANsupervisor ubuntu:~# systemctl enable WANsupervisor Step 4. Setup the Filter Log in to the Console to set up Filter(s). Filters are started, monitored and stopped by the WANsupervisor daemon, so make sure the WANsupervisor service is always running.