Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

4-12

Connecting the FVS124G to the Internet

202-10085-01, March 2005

Manually Configuring Your Internet Connection

You can manually configure your firewall using the menu below if you do not want to allow the

Setup Wizard to determine your configuration as described in the previous sections.

Figure 4-4:

Browser-based configuration WAN ISP Settings menus (WAN1 ISP shown)

ISP

Does

Not

Require Login

ISP

Does

Require Login

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

Connecting the FVS124G to the Internet

4-13

202-10085-01, March 2005

Programming the Traffic Meter (if Desired)

From the Main Menu of the browser interface, under WAN Setup, click Traffic Meter. You will get

the screens shown in

Figure 4-5

. Fill out the information described in

Table 4-1

.

Figure 4-5:

Traffic Meter screens

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

4-14

Connecting the FVS124G to the Internet

202-10085-01, March 2005

Table 4-1.

Traffic meter

Parameter

Description

Enable Traffic Meter

Check this if you wish to record the volume of Internet traffic passing through the

Router's WAN1 or WAN2 port.WAN1 or WAN2 can be selected through the drop

down menu, the entire configuration is specific to each wan interface.

•

No Limit - If this is selected specified restriction will not be applied when traffic limit

is reached.

•

Download only - If this is selected the specified restriction will be applied to the

incoming traffic only

•

Both Directions - If this is selected the specified restriction will be applied to both

incoming and outgoing traffic only

Enable Monthly Limit

Use this if your ISP charges for additional traffic. If enabled, enter the monthly

volume limit and select the desired behavior when the limit is reached.

Note

: Both incoming and outgoing traffic are included in the limit.

Increase this

month's limit

Use this to temporarily increase the Traffic Limit if you have reached the monthly

limit, but need to continue accessing the Internet. Check the checkbox and enter the

desired increase. (The checkbox will automatically be cleared when saved so the

increase is only applied once.)

This month's limit

This displays the limit for the current month.

Restart traffic

counter

This determines when the traffic counter restarts. Choose the desired time and day of

the month.

Restart Counter Now

Click this button to restart the Traffic Counter immediately.

Send E-mail Report

before restarting

counter

If checked, an E-mail report will be sent immediately before restarting the counter.

You must configure the E-mail screen in order for this function to work (see

“Getting

E-Mail Notifications of Event Logs and Alerts” on page 6-30

).

When limit is

reached

Select the desired option:

•

Block all traffic - all access to and from the Internet will be blocked.

•

Block all traffic except E-mail - Only E-mail traffic will be allowed. All other traffic will

be blocked.

•

If using this option, you may also select the Send E-mail alert option. You must

configure the E-mail screen in order for this function to work.

Internet Traffic

Statistics

This displays statistics on Internet Traffic via the WAN port. If you have not enabled

the Traffic Meter, these statistics are not available.

Traffic by Protocol

Click this button if you want to know more details of the Internet Traffic. The volume

of traffic for each protocol will be displayed in a sub-window.Traffic counters are

updated in MBytes scale, counter starts only when traffic passed is at least 1MB.

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

Connecting the FVS124G to the Internet

4-15

202-10085-01, March 2005

Step 4: Configure the WAN Mode (Required for Dual WAN)

The dual WAN ports of the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual

WAN Ports can be configured on a mutually exclusive basis for either rollover for increased

system reliability or load balancing for maximum bandwidth efficiency.

•

Rollover (Auto-Rollover) Mode

—In this mode, the selected WAN interface is made primary

and the other is the rollover link. As long as the primary link is up, all traffic is sent over the

primary link. Once the primary WAN interface goes down, the rollover link is brought up to

send the traffic.

Traffic will automatically roll back to the original primary link once the original primary link

is back up and running again.

•

Load Balancing Mode

—In this mode the router distributes the outbound traffic equally

among the WAN interfaces that are functional.

For both alternatives, you must also set up Network Address Translation (NAT):

•

NAT—NAT is the technology which allows all PCs on your LAN to share a single Internet IP

address. From the Internet, there is only a single device (the Router) and a single IP address.

PCs on your LAN can use any "private" IP address range, and these IP addresses are not

visible from the Internet.

–

The Router uses NAT to select the correct PC (on your LAN) to receive any incoming

data.

–

If you only have a single Internet IP address, you MUST use NAT.

•

Classical Routing—In this mode, the Router performs Routing, but without NAT. To gain

Internet access, each PC on your LAN must have a valid Internet IP address.

If your ISP has allocated many IP addresses to you, and you have assigned one of these

addresses to each PC, you can choose Classical Routing. Otherwise, selecting this method will

not allow Internet access through this Router.

To learn the status of the WAN ports, you can view the Router Status page (see

“Firewall Status”

on page 8-14

) or look at the LEDs on the front panel (see

“The Router’s Front Panel” on page 2-6

).

Note:

Scenarios could arise when load balancing needs to be bypassed for certain traffic

or applications. Here the traffic needs to go on a specific WAN interface. This is done

with the protocol binding rules of that WAN interface. The rule should match the desired

traffic.

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

4-16

Connecting the FVS124G to the Internet

202-10085-01, March 2005

Rollover Setup

Perform the following steps to configure the dual WAN ports for rollover:

1.

Click the WAN Mode link directly under Setup on the upper left of the main menu to invoke

the WAN Mode Auto-Rollover screen shown in

Figure 4-6

.

Figure 4-6:

WAN Mode screen for auto-rollover

Fill out the screen using the following parameter definitions:

•

Detection of WAN failure—WAN failure is detected using DNS queries to the DNS

server. For each WAN interface, DNS queries are sent to the configured DNS server. If the

DNS replies are not received, the corresponding WAN interface is considered down.

–

ISP DNS Server—In this case, DNS queries are sent to the DNS server configured on

the WAN ISP pages (see

“Step 3: Configure the Internet Connections to Your ISPs

(Required)” on page 4-8

).

–

Public DNS Server—The user is also given an option, to enter any Public DNS

server.DNS queries are sent to this server through the WAN interface being

monitored.