Overview

While configuring ports and physical cables on Kerio Control NG511 hardware box, the default WAN (Internet) interface is not being assigned as eth0. There is a naming discrepancy in Mac addresses of eth0 reported from Webadmin and on the physical device itself.

Information

This issue was fixed in Kerio Control 9.3.6 patch 1. Please upgrade to the latest version of Kerio Control to resolve this problem.

Alternate potential workaround for older versions

• The 8-port group on the right is always connected to the first PCI bridge of the motherboard. That is, these 8 ports have always lower PCI bus addresses compared with the other 6-port group.
  
• Linux udev system automatically assigns "ethX" labels starting from the port having the lowest bus address.
  
• So, labels are always starting from 0 (zero) on the 8-port group.
• The first port on the front panel having the label "Internet" is always assigned as "eth8" which is the 9th in the order.
• Kerio Control selects the "first" port as one having the lowest MAC address.

In brief, the hardware design of the NG511 box results in the 8-port group appears in the front (eth0-eth7) and the other 6-port group next (eth8-eth13). You can still change "ethX" labeling by modifying the "/etc/iftab" file.

1. Login to the Kerio Control via SSH or serial console.
2. Make the system read-writable by executing the following command:
   mount -o remount,rw /
   
3. Open the /etc/iftab using Nano or Vim. Switch the eth0 and ethX (in this case eth0 and eth8) Mac addresses and save the changes.
   
   
4. Reboot Kerio Control to load the new iftab configuration.
5. Perform a factory reset by either accessing the console or running /usr/bin/kerio-console in an SSH session. This will update the Kerio Control configuration based on the iftab, to ensure the interface names are set up properly.

Reference: NG 511 Port Ordering