Installation Guide for OPNids

A few simple steps to get you going.

Thank you for choosing to Install OPNids. Just follow these steps and then head to our documentation for further configuration.

Step 1 - Hardware Selection & Sizing

Minimum & Recommended Configurations

Before you can install OPNids select the right hardware for your setup.

The recommended minimum specification to run all OPNids standard features, means every feature is functional and fits most use cases.

  • Processor: 1.5 GHz multi core CPU

  • RAM: 4 GB

  • Install method: Serial console, ISO, and VM

  • Install target: 120 GB SSD

Step 2 - Download & Prepare Installation Media

Select the right version for your system

Installation Files

Depending on your hardware and use case different installation files are provided to Install OPNids:

  • serial: USB installer image with live system capabilities running in serial console (115200) mode with secondary VGA support

  • ISO: ISO installer image with live system capabilities running in VGA-only mode

Sample file listing

  • OPNids-18.9.x-OpenSSL-dvd-amd64.iso.bz2

  • OPNids-18.9.x-OpenSSL-serial-amd64.img.bz2

Writing to Installation Media

The easiest method of installation is the USB-memstick installer. If your target platform has a serial interface choose the “serial image. 64-bit install images are provided. The following examples apply to both.

Write the image to a USB flash drive (>= 1GB), either with dd under FreeBSD or under Windows with physdiskwrite (or Rufus).

Before writing an (iso) image you need to unpack it first (use bunzip2).


dd if=OPNids-##.#.##-[Type]-[Architecture].[img|iso] of=/dev/daX bs=16k

Where X = the device number of your USB flash drive (check dmesg)


dd  if=OPNids-##.#.##-[Type]-[Architecture].[img|iso] of=/dev/sdX bs=16k 

where X = the IDE device name of your USB flash drive (check with hdparm -i /dev/sdX) (ignore the warning about trailing garbage - it’s because of the digital signature)


dd if=OPNids-##.#.##-[Type]-[Architecture].[img|iso] of=/dev/rsd6c bs=16k 

The device must be the ENTIRE device (in Windows/DOS language: the ‘C’ partition), and a raw I/O device (the ‘r’ in front of the device “sd6”), not a block mode device.

Mac OS X

sudo dd  if=OPNids-##.#.##-[Type]-[Architecture].[img|iso] of=/dev/rdiskX bs=64k 

where r = raw device, and where X = the disk device number of your CF card (check Disk Utility) (ignore the warning about trailing garbage - it’s because of the digital signature)


physdiskwrite -u OPNids-##.#.##-[Type]-[Architecture].[img|iso].img 

A simple alternative for writing image under windows is Rufus a tool to create bootable USB sticks with a nice GUI.

Step 3 - Installation to Target Device

Using the USB Installer & Quickly Install OPNids

Install OPNids to target system

Configure your system to boot from USB.

Default behaviour is to start the Live environment, to install log in with user installer and password opnids

The installation process involves a few simple steps.

  1. Configure console - The default configuration should be fine for most occasions.
  2. Select task - The Quick/Easy Install option should be fine for most occasions. For installations on embedded systems or systems with minimal diskspace choose Custom Installation and do not create a swap slice. Continue with default settings.
  3. Are you SURE? - When proceeding OPNids will be installed on the first hard disk in the system.
  4. Reboot - The system is now installed and needs to be rebooted to continue with configuration.

WARNING: You will lose all files on the installation disk. If another disk is to be used then choose a Custom installation instead of the Quick/Easy Install.

VMware or XEN virtual Installations

After installation go to firmware page in the GUI and install the vmware-tools or xen-tools plugin for maximum performance and compatibility.

Step 4 - Initial Setup & Configuration

Some tips and pointers to our online documentation


Port Assignments

By default the system will be configured with 2 interfaces LAN & WAN. The first network port found will be configured as LAN and the second will be WAN.

IP ranges & DHCP

The WAN port will have a dhcp client and expects to be assigned an IP adress.

Users & Passwords

Default user: root / password: opnids

Also good to know

For security reasons ssh is disabled by default and the console access is password protected.

Online Documentation

An extensive manual is provided online with many up-to-date examples for making the most out of your newly setup security platform.
Go to: