Installation - Cipafilter Documentation

Manual - Installation

In most cases you will want to consult with Cipafilter support to decide what way the router can best be installed to meet your needs.  A full over-the-phone consultation during installation is included in the standard one-year maintenance and service agreement that comes with your router.

Cipafilter is usually installed one of four ways:  as a replacement for your existing router, as a bridge spliced into the link between your existing router and your switch bank, as a second router connected to your existing router with a cross-over cable, or as a server on your network.
Of the four ways that Cipafilter is usually installed, installation as a bridge is the easiest.  Installation as a replacement for your existing router is most recommended, however.

The Cipafilter ships with assigned to its first Ethernet interface and assigned to its second interface.  If your network does not use IP addresses, you can simply assign an IP like (netmask to your workstation and plug the Cipafilter into your hub or switch.

If your network does use these IP addresses, plugging your Cipafilter in without taking the proper precautions could cause loss of Internet access or other problems.  If you're not sure, please call us for assistance.

To begin the initial configuration, go to in your Web browser. The default user name to log in is root and the default password is derby. The password can (and should) be changed on the Management Users page.

As a replacement for your router

Often you will find that the best way to install your Cipafilter is as a replacement for your current router.  Cipafilter is a top-of-the-line router and implements virtually all of the functionality of other routing systems.  In this case you would configure Cipafilter with the IP addresses, routes, and NAT settings currently on your router, and then replace your current router.

As a bridge

The easiest way to install your Cipafilter is as a bridge.  Simply unplug your existing router from your switch bank, connect the Cipafilter to that port on your router via a cross-over cable, and then connect the cable that was plugged into your router to the other port on the Cipafilter.  Lastly, enable the Interface Bridging option on the IP Settings page of the Web-based interface.  Your network should now operate normally, and you can activate the Cipafilter's features one-by-one as you're ready to implement them.

Between your router and your network

If you do not wish to replace your current router, you can connect the Cipafilter and your existing router with a cross-over cable, and then connect the Cipafilter to the rest of your network.  This essentially "splices" the Cipafilter into the cable running from your router to your network.  To do this you must first pick a small subnet from a private range you aren't using.  If you're using you might pick, for example. Assuming the default gateway you use for your clients is, you would then:

  1. Replace the IP address on your main router with

  2. Configure your Cipafilter with on the outside interface and on the inside interface.

  3. Disconnect your main router from the hub, and run a cross-over cable from that Ethernet port on your main router to the outside Ethernet port on the Cipafilter.

  4. Connect the inside Ethernet port on your Cipafilter to the port on your hub or switch where your router was connected.

  5. Create a route for with a gateway of in your main router; alternatively, you can choose to activate NAT on the subnet on the Cipafilter and not create a route.  If you choose the NAT option be certain that the interface is selected as the Primary Internet Connection.

As a server

Many features of the Cipafilter can be used simply by assigning the Cipafilter an IP address on your network and connecting it like any other server.

Disadvantages to this method include:
  • Transparent proxy will be unavailable.

  • The firewall function will be ineffective.

  • You will often need to add firewall rules to your existing router to force users to use the proxy server in order to make Cipafilter effective at protecting your network.

  • Bandwidth control will only be effective for Internet traffic working through the proxy server.

  • The bandwidth-reporting feature may not be able to monitor all traffic on your network.

Running on a virtual machine

The Cipafilter firmware is also available as an image suitable for use with a virtual-machine solution.  VMware is the most common and best-supported vendor, although many others have been used successfully.  Any of the four previous methods may be combined with the virtual-machine option.

Although bridging mode will work with a VM-based filter, this combination is somewhat more complex than others.  Enabling bridging on an improperly configured virtual machine can cause serious network issues and even (in rare cases) hardware damage.  It is recommended that only the most advanced administrators make use of this option.

    • Related Articles

    • Manual

      This article provides links to the individual sections of the Cipafilter product manual.  A PDF of the Cipafilter product manual is attached to this article. Introduction Interface Conventions Installation Status Management Users Hot Spare ...
    • Manual - Introduction

      Cipafilter is a powerful routing platform capable of delivering an evolving tool set to protect your enterprise. Cipafilter's philosophy is to provide a cuing edge, well rounded, and aggressive network control solution to meet your current and future ...
    • Manual - Portal

      The Cipafilter portal is a Web site that acts as a central point for Web-based authentication and SSL certificate installation. It can be accessed manually from any client which is proxying through the Cipafilter via; some users ...
    • Manual - Firmware Updates

      Device firmware can be updated from this page. Cipafilter uses an "A/B" system to allow firmware updates to be installed in the background without disrupting operation of the filter. The new firmware can then be activated when convenient. It is also ...
    • Manual - Interface Conventions

      Most page/section headers, as well as certain option labels, within the Web interface can be clicked to produce the relevant section of this manual. Clicking a Save Changes button will cause the configuration options on any particular page to be ...