Create and Configure the VM-Series Firewall

Open the ECS console and select
Instances
.
On the upper right, select
Create Instance
.
Select
Custom
.

Basic Configurations.
Fill in the following values.
Property	Value
Billing Method	Pay-As-You-Go
Region	US West 1 (Silicon Valley). You can also select a Zone.
Instance/Instance Type	ecs.sn2ne.xlarge
Image	Select Custom Image and choose the custom image you created in Create a Custom Image in the Alibaba Cloud Console.
Storage	Choose a disk type and specify 60 GiB.
Select
Next: Networking
.
On the Networking page, supply the following values.
Network (VPC).
Choose the VPC you created in Create a VPC and Configure Networks.
Choose the Management VSwitch.
Network Billing Method.
Do not assign a public IP address at this time.
Elastic Network Interface.
The Management interface is already attached to eth0.
Select
Next: System Configurations
.
On the System Configurations page, fill in the following values.
Log On Credentials: Select
Inherit Password from Image
.
The default user name for the VM-Series firewall is admin and the password is also admin.
Name the VM-Series firewall instance.
Select Preview to view your settings thus far.
Make any corrections.
Select
Create Instance
to create the VM-Series firewall instance.
From the console home page, choose
Elastic Compute Service
Networks and Security
ENI
and click
Create ENI
in the top right corner.Create elastic network interfaces for the Untrust and Trust interfaces.
Create the Untrust ENI.
Create the Trust ENI.
Attach ENIs to the VM-Series firewall Untrust and Trust interfaces.
Attach the Untrust ENI.
Attach the Trust ENI.
Change the default user name and password immediately.
Use the VNC console to connect to the management terminal, and log on to the ECS instance, and change the VM-Series firewall default username and password (admin/admin). If you do not know the VNC connection password, you must change the password for the VNC console.
Change the VM-Series firewall username and password before you associate IP addresses with any network interface.
Allocate two Elastic IP (EIP) addresses.
Allocate EIP addresses for the VM-Series firewall Management interface and the Untrust network interface. In this example the Trust interface is not exposed to the internet, so you don’t need a third IP address.
If you already have two EIPs, go to the next step.
Associate an EIP with the VM-Series firewall Management interface.
Associate an EIP with the VM-Series firewall Untrust network interface.
The second interface you attach is assigned to network interface 1 on the VM-Series firewall.
Restart your instance to attach the new network interfaces.
On the Instances list, select your instance and click
Manage
, and click
Restart
on the upper right.
Access the VM-Series firewall web interface.
Open a web browser and enter the EIP for the management interface.