Page 131 / 212 Scroll up to view Page 126 - 130
Reference Manual for the ProSafe VPN Firewall FVS114
Advanced Configuration
8-5
202-10098-01, April 2005
Using the LAN IP Setup Options
The LAN IP Setup menu allows configuration of LAN IP services such as DHCP and RIP. From
the main menu of the browser interface, under Advanced, click on
LAN IP Setup
to view the
menu shown below.
Figure 8-3:
LAN IP Setup Menu
Configuring LAN TCP/IP Setup Parameters
The firewall is shipped preconfigured to use private IP addresses on the LAN side, and to act as a
DHCP server. The firewall’s default LAN IP configuration is:
LAN IP addresses—192.168.0.1
Subnet mask—255.255.255.0
Note:
If your ISP assigns a private WAN IP address such as 192.168.x.x or 10.x.x.x, the
dynamic DNS service will not work because private addresses will not be routed on the
Internet.
Page 132 / 212
Reference Manual for the ProSafe VPN Firewall FVS114
8-6
Advanced Configuration
202-10098-01, April 2005
These addresses are part of the IETF-designated private address range for use in private networks,
and should be suitable in most applications. If your network has a requirement to use a different IP
addressing scheme, you can make those changes in this menu.
The LAN IP parameters are:
IP Address
This is the LAN IP address of the firewall.
IP Subnet Mask
This is the LAN Subnet Mask of the firewall. Combined with the IP address, the IP Subnet
Mask allows a device to know which other addresses are local to it, and which must be reached
through a gateway or firewall.
RIP Direction
RIP (Router Information Protocol) allows a firewall to exchange routing information with
other firewalls. The RIP Direction selection controls how the firewall sends and receives RIP
packets. Both is the default.
When set to Both or Out Only, the firewall broadcasts its routing table periodically.
When set to Both or In Only, it incorporates the RIP information that it receives.
When set to None, it will not send any RIP packets and ignores any RIP packets received.
RIP Version
This controls the format and the broadcasting method of the RIP packets that the firewall
sends. (It recognizes both formats when receiving.) By default, this is set for RIP-1.
RIP-1 is universally supported. RIP-1 is probably adequate for most networks, unless you
have an unusual network setup.
RIP-2 carries more information. RIP-2B uses subnet broadcasting.
Note:
If you change the LAN IP address of the firewall while connected through the
browser, you will be disconnected. You must then open a new connection to the new IP
address and log in again.
Page 133 / 212
Reference Manual for the ProSafe VPN Firewall FVS114
Advanced Configuration
8-7
202-10098-01, April 2005
Using the Firewall as a DHCP server
By default, the firewall functions as a DHCP (Dynamic Host Configuration Protocol) server,
allowing it to assign IP, DNS server, and default gateway addresses to all computers connected to
the firewall's LAN. The assigned default gateway address is the LAN address of the firewall. IP
addresses will be assigned to the attached PCs from a pool of addresses specified in this menu.
Each pool address is tested before it is assigned to avoid duplicate addresses on the LAN.
For most applications, the default DHCP and TCP/IP settings of the firewall are satisfactory. See
“IP Configuration by DHCP” on page B-10
” for an explanation of DHCP and information about
how to assign IP addresses for your network.
If another device on your network will be the DHCP server, or if you will manually configure the
network settings of all of your computers, clear the
Use router as DHCP server
check box.
Otherwise, leave it checked.
To specify the pool of IP addresses to be assigned, set the Starting IP Address and Ending IP
Address. These addresses should be part of the same IP address subnet as the firewall’s LAN IP
address. Using the default addressing scheme, you should define a range between 192.168.0.2 and
192.168.0.253, although you may wish to save part of the range for devices with fixed addresses.
The firewall will deliver the following parameters to any LAN device that requests DHCP:
An IP address from the range you have defined
Subnet mask
Gateway IP address (the firewall’s LAN IP address)
Primary DNS server (if you entered a primary DNS address in the Basic Settings menu;
otherwise, the firewall’s LAN IP address)
Secondary DNS server (if you entered a secondary DNS address in the Basic Settings menu
Using Address Reservation
When you specify a reserved IP address for a PC on the LAN, that PC will always receive the
same IP address each time it accesses the firewall’s DHCP server. Reserved IP addresses should be
assigned to servers that require permanent IP settings.
To reserve an IP address:
1.
Click the
Add
button.
Page 134 / 212
Reference Manual for the ProSafe VPN Firewall FVS114
8-8
Advanced Configuration
202-10098-01, April 2005
Figure 8-4:
Reserved IP Address menu
2.
In the IP Address box, type the IP address to assign to the PC or server.
(Choose an IP address from the firewall’s LAN subnet, such as 192.168.0.X.)
3.
Type the MAC Address of the PC or server.
(
Tip
: If the PC is already present on your network, you can copy its MAC address from the
Attached Devices menu and paste it here.)
4.
Click
Apply
to enter the reserved address into the table.
Note
: The reserved address will not be assigned until the next time the PC contacts the firewall’s
DHCP server. Reboot the PC or access its IP configuration and force a DHCP release and renew.
To edit or delete a reserved address entry:
1.
Click the button next to the reserved address you want to edit or delete.
2.
Click
Edit
or
Delete
.
Configuring Static Routes
Static Routes provide additional routing information to your firewall. Under normal
circumstances, the firewall has adequate routing information after it has been configured for
Internet access, and you do not need to configure additional static routes. You must configure
static routes only for unusual cases such as multiple firewalls or multiple IP subnets located on
your network.
From the Main Menu of the browser interface, under Advanced, click on
Static Routes
to view the
Static Route table shown below.
Page 135 / 212
Reference Manual for the ProSafe VPN Firewall FVS114
Advanced Configuration
8-9
202-10098-01, April 2005
Figure 8-5:
Static Routes table
To add or edit a Static Route:
1.
Click the
Add
button to open the Add/Edit menu, shown below.
Figure 8-6:
Static Route Entry and Edit menu
2.
Type a route name for this static route in the Route Name box.
(This is for identification purpose only.)
3.
Select Private if you want to limit access to the LAN only. The static route will not be reported
in RIP.
4.
Select Active to make this route effective.
5.
Type the Destination IP Address of the final destination.
6.
Type the IP Subnet Mask for this destination.
If the destination is a single host, type
255.255.255.255
.
7.
Type the Gateway IP Address, which must be a firewall on the same LAN segment as the
firewall.

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top