Pick an Installation Type & Prepare your Network
ThisIt's essential to know how your network is configured prior to starting a high-levelDrawBridge overview/checklistinstallation. ofWe essential tasksrecommend that need performed to install the DrawBridge on your network.you:
Decide onInstallation TypeGatewayPerform(recommended)a AlternatenetworkGatewayscan Proxyof
existing - setup.
CollectA good tool for this is the free Advanced IP Scanner, available here. Run the scan and take note of the IP addresses of your devices. Save or print the scan output for your reference. In some situations, it is important that specific computers (such as servers) andcredentialsprinters maintain the same IP address across network infrastructure changes to ensure the most seamless migration. - Locate the web configuration panels for your existing network infrastructure
equipmentmodems, routers, managed switches,modem, wireless routers/access points, firewalls, managed switches, etc) andservers)ensure you have the correct login credentials available. - Determine what device is the existing gateway
- Determine what device is the existing DNS and DHCP server. Generally, on most Small Office/Home Office networks, these services are handled by the same unit as
applicable.the - gateway.
ReconfigureYou can check this by opening Network Connections (Windows) --ncpa.cpl
in the Start Menu search box -- and right-clicking the networktoadapteraccomodateinyouruseinstallation type(For example, ifGateway, replace primary router withat theDrawBridgemoment,inclickinggatewayStatus,situations;anddisablethenDHCPDetails.onNotewirelesstherouterIPifaddresscontinuingshown for the gateway, and compare it touse as wireless access point) Enable remote-device access(where applicable) by configuring Port Forwarding or DMZ on your modem (if not Bridged) or Firewall.Ensure DNS is properly configured:Gateway setups: In most situationstheDrawBridgeIPisaddressesalso thefor DHCP andDNSDNS.serverAgain,foron most small networks, these will all be thenetwork, so no additional configuration is required.Alternate Gateway/Proxy setups: ensure https://draw.bridge and the system DNS names are configured on your local DNS server to resolve to the local networksame IPof the DrawBridge. See #5, below.address.
Install SSL Certificates on all devices: visit http://draw.bridge/sslcerts/dashboard/ on your LAN post-install and follow the correct steps for your platform. Alternatively, if the local DrawBridge is not reachable yet, visit the Certificates panel on one of our cloud servers: http://whitespire.compassfoundation.io/sslcerts/dashboard/"Harden"/Secure configuration: (make bypassing filtering difficult; optional)Gateway setups: disable WiFi and DHCP on the (upstream) modemAlternate Gateway/Proxy setups: block 80/443 TCPandUDP in your gateway firewall to enforce proxy settings on clients