KB43622 - Pulse One (PSA7000) Setup Guide

This article describes the procedure to configure a PSA7000 as a Pulse One appliance and upgrade to the latest Pulse One On Premise build.

The Getting Started Guide for the default image version that is initially activated on the device does not include the steps to upgrade the Pulse One package and does not properly explain the network interface configuration that gets changed after upgrading the Pulse One package.  This guide covers the steps that are not included with the original documentation.  

The PSA7000 ships with a Quick Start Guide included in the package.  The guide provides instructions on getting connected to the device via serial console to perform basic configuration steps.  Complete Sections 1-4 then once the device is powered on, refer to the steps below to continue.  

Important Note:  Configuring a PSA7000 as a Pulse One appliance is an irreversible action that cannot be undone.  Once the device is configured with the Pulse One image it is not possible to switch to a Pulse Connect Secure or Pulse Policy Secure personality. 

1. As per Section 5 Step 1 of the Quick Start Guide select option [3] to install the Pulse One Service package 2.0 R1637 (build 85).

 

2. The image will be installed and the output on screen will be similar to the next two screenshots:

 

 

3. Once the installation is complete  the device will prompt for local host login. 

 

4. Login as "root".  There is no password required.
5. Reboot the device by typing the command reboot.

 

 

6. Once rebooted the device will prompt for login.  Login as root again.

(Pulse One Getting Started Guide steps start here.)

7. Follow the prompts to enter a username and password for the terminal user account and login with the account.

Important Note: The next section provides steps for configuring the network interface.  Prior to upgrading the Pulse One device, the pre-installed image 1637 uses the management port.  The external port will be enabled after upgrading the software.   

8. Configure network settings.  Type the command network help or help network for available options.

Note:  For a complete list of network commands, refer to the "Getting Started Guide" for version 2.0.1637 which is available HERE.

9. To configure the IP address and netmask for the management port, type the following command:

network interface -i <ip> -n <netmask> -enable management

Example: 
 

network interface -i 10.66.201.5 -n 255.255.255.0 -enable management

10. To configure the gateway for the management port, type the following command:

network gateway -i <ip> -f management

Example:

network gateway -i 10.66.201.1 -f management

11. At any time type the command network show to confirm IP information.  To make changes, type the commands from step 3 and step 4 again.
12. Verify connectivity by pinging the IP address of the Pulse One management port from another device on the same network or use the following command to ping the gateway from the Pulse One management interface.

network ping <IP>

Example:

Upgrade Pulse One to the latest version
Note: For a new deployment It is recommended to use the latest version available for Pulse One. Ensure to download package from Pulse Secure site and host the package either via http or https internal webserver (this is the process for now as package cannot be hosted in Pulse One at this time)

13. Download the latest Pulse One package from the Pulse Secure Software Download Center.  (Refer to KB40028 - [Customer Support Tools] How to download software / firmware for Pulse Secure products using the Licensing & Download Center at my.pulsesecure.net)
14. Host the upgrade package on an internal Webserver that is reachable via http or https from the management port.
15. Run an MD5 hash on the package and save the hash value as this will be needed from the Pulse One serial console for the upgrade command.
16. Use the following command to upgrade Pulse One.  (Use the IP address of the Web server hosting the package since DNS has not been configure yet.)

system upgrade <http://<webserverIP:port>/<package name> <MD5 Hash>>

Example:

 

17. Monitor the installation progress.  When upgrade is complete, Press <Enter> when prompted to reboot.

 

18. Use the command services status to check that services are running.

> To enable all services, type "services start"

​
 

19. To enable all services type the command services start.
20. Connect a cable to the external port and configure the external port IP address and DNS information.  (Note: The gateway IP address that was originally defined for the management port will be applied as the IP address of the external port automatically.  Therefore, it is necessary to modify the external port settings.)
21. Use the network show command to display the external port settings.

 

At this point, the Pulse One admin should refer to the Network Setup of the latest "Getting Started Guide" HERE to complete the following tasks:

• Configure the internal and external interfaces
• Configure primary and secondary DNS
• Configure NTP and SMTP (optional)
• Provision the domain
• Register appliances and test functionality