# 安裝第一台GM ## 部署OVA 範本 在esxi 上設定OVA虛擬機 ![image](https://hackmd.io/_uploads/SkTMj6KhT.png) 選擇下載好的OVA ![image](https://hackmd.io/_uploads/r1tQiTYha.png) 部屬OVA 範本-選取計算資源 ![image](https://hackmd.io/_uploads/rJ3X2TY2T.png) 部屬OVA 範本-選擇組態(這邊選擇設備型號， 可依據需求選擇， 差異在設備的效能與規格， 例如DNS 的每秒queries數量,詳請參考datasheet) ![image](https://hackmd.io/_uploads/Sy4rhTYha.png) 進入console 介面,預設帳密admin/infoblox ![image](https://hackmd.io/_uploads/rkiDhaK3a.png) 使用`set network`設定內部相關網路資訊，包含ip mask defaultGW等等資訊 ![image](https://hackmd.io/_uploads/Bk352at26.png) ![image](https://hackmd.io/_uploads/r1gjn6Kh6.png) 利用`set temp_license`啟用功能,預設90 天,超過無法延長 啟用2,4,9,14(optional) ![image](https://hackmd.io/_uploads/HkVWaaKnT.png) 登入 infoblox webUI 介面![image](https://hackmd.io/_uploads/HJeo-ppK2T.png) 記得不勾選![image](https://hackmd.io/_uploads/ryHzTTYha.png) 首次登入會 進入first wizard 第一台設定 為GM![image](https://hackmd.io/_uploads/ry2fT6Kn6.png) 設定名稱密碼， 預設為"test" Hostname 可修改 ![image](https://hackmd.io/_uploads/rJu76ptna.png) 確認介面資訊後續可直接 按Finish ![image](https://hackmd.io/_uploads/By0Xpptn6.png) ## 安裝Reporter 注意要多給他一個硬碟 ![image](https://hackmd.io/_uploads/HJlSCpt2p.png) 登入Console介面 預設admin/infoblox 輸入指令`set network` 鍵入相關資訊 ![image](https://hackmd.io/_uploads/SJNQHkq2T.png) 輸入指令`set temp_license` 按下4先指定型號為reporter (項次16) ![image](https://hackmd.io/_uploads/rJYjpTKnp.png) 會出現提示訊息說空間要250 temp license會有60天 ![image](https://hackmd.io/_uploads/HJ17yCFhp.png) 接著安裝grid license `set temp_license` 選項2 連續三個y ![螢幕擷取畫面 2024-02-26 164706](https://hackmd.io/_uploads/H1tbaRFha.png) ## 登入WEB 登入infoblox webUI 介面 ![image](https://hackmd.io/_uploads/B1RBA0Yh6.png) 記得不勾選 ![image](https://hackmd.io/_uploads/S1vLAAY2p.png) 首次登入會進入first wizard 第一台設定為GM ![image](https://hackmd.io/_uploads/ByDvRCFhT.png) 設定名稱密碼，預設為test Hostname可修改 ![image](https://hackmd.io/_uploads/Sk-dA0F2a.png) 確認介面資訊 後續可直接按Finish ![image](https://hackmd.io/_uploads/H1OlJyq2a.png) ## 啟用DNS 於Grid 設定DNS Service並按下撥放鍵啟用 ![image](https://hackmd.io/_uploads/B1vlMhThT.png) 會跳出一個視窗問要不要啟用DNS Service服務,按下Yes ![image](https://hackmd.io/_uploads/HkN9f2T3p.png) 可以利用畫面的重新整理更新畫面 ![image](https://hackmd.io/_uploads/BkSaG263a.png) 注意到她畫面變成Working ![image](https://hackmd.io/_uploads/H1JgXh6na.png) 設定Recursion啟用，於DNS Service選擇edit後 Queries分頁勾選Allow Recursion 並按下Save & close ![image](https://hackmd.io/_uploads/B1eqnls26.png) 按下去後會出現還沒設定trust anchor 要不要啟用 選擇yes ![image](https://hackmd.io/_uploads/ry4KQhT3T.png) 最上方會出現設定需要重啟服務,問你要不要重啟 ![image](https://hackmd.io/_uploads/HJWxV3php.png) 點選restart後 進入此畫面在按下restart ![image](https://hackmd.io/_uploads/H1nQEn6np.png) 設定內部Zone，點選Data Management->Zone->按下新增 ![image](https://hackmd.io/_uploads/rJsqhejna.png) 輸入相關zone資訊，加號下面設定ext primary& grid secondary, 之後才能解析內部DNS資訊 ![image](https://hackmd.io/_uploads/Sy8s3esn6.png) ![image](https://hackmd.io/_uploads/HyYo2ls3T.png) ![image](https://hackmd.io/_uploads/SyJ2hls3p.png) ## 新增Member 選擇Grid 按下新增 ![image](https://hackmd.io/_uploads/Byu0Co6np.png) 選擇Viryual Nios,輸入hostname ![image](https://hackmd.io/_uploads/HyHMk1q36.png) 輸入相關介面資訊並按下save&close ![image](https://hackmd.io/_uploads/ryTfJ19hp.png) 於console中設定set membership (注意,網路等相關設定應該已經在安裝Reporter步驟完成) ![image](https://hackmd.io/_uploads/rkH7yJ93T.png) 完成後，應會看到他進入running的畫面 ![image](https://hackmd.io/_uploads/H1WTlkq3T.png) 可以在console看到她去找grid master報到 ![image](https://hackmd.io/_uploads/SkMCu1526.png) ## 設定RPZ相關功能 先設定Name Server Group 設定兩筆如右圖 ![image](https://hackmd.io/_uploads/rkK80nT3p.png) 外部ext primary RPZ IP: 61.216.133.103 Key Name: TSIG-METAAGE Key Algorithm: HMAC-MD5 Key Data: D5bU9A9GkKna6w4XH+vxiFSw3R9TBqMdh5umRPbO6Hq9CuANwHz8dpmWJYhXE8sUv0pwKyUkq8x8sKEExjBw3g== 內部Grid直接指定GM ![image](https://hackmd.io/_uploads/Sk5Dvpah6.png) RPZ清單表格整理如下 感謝 @farmer87 整理的API作法 | feed | rpz_name | | --- | --- | | AntiMalware | antimalware.rpz.infoblox.local | | Base | base.rpz.infoblox.local | | Bogon | bogon.rpz.infoblox.local | | DHS_AIS_Domain | dhs-ais-domain.rpz.infoblox.local | | DHS_AIS_IP | dhs-ais-ip.rpz.infoblox.local | | NCCIC_Host | nccic-host.rpz.infoblox.local | | NCCIC_IP | nccic-ip.rpz.infoblox.local | | Ransomware | ransomware.rpz.infoblox.local | | AntiMalware_IP | antimalware-ip.rpz.infoblox.local | | Bot_IP | bot-ip.rpz.infoblox.local | | Cryptocurrency | cryptocurrency.rpz.infoblox.local | | ExploitKit_IP | exploitkit-ip.rpz.infoblox.local | | Malware_DGA | malware-dga.rpz.infoblox.local | | SURBL_Fresh | fresh-domain.surbl.rpz.infoblox.local | | SURBL_Multi | multi-domain.surbl.rpz.infoblox.local | | SURBL_Multi_Lite | surbl-lite.rpz.infoblox.local | | TOR_Exit_Node_IP | tor-exit-node-ip.rpz.infoblox.local | 設定RPZ清單 ![image](https://hackmd.io/_uploads/B1ROPpp36.png) 設定RPZ Feed ![image](https://hackmd.io/_uploads/SkDtPpa3a.png) 指定Name Server Group ![image](https://hackmd.io/_uploads/BJ6tDpT3T.png)