Page 71 / 238 Scroll up to view Page 66 - 70
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports
LAN Configuration
5-3
202-10085-01, March 2005
IP Subnet Mask: The subnet mask specifies the network number portion of an IP address. Your
router will automatically calculate the subnet mask based on the IP address that you assign.
Unless you are implementing subnetting, use 255.255.255.0 as the subnet mask (computed by
the router).
RIP Direction: RIP (Routing Information Protocol, RFC 2453) allows a router to exchange
routing information with other routers. The RIP Direction selection controls how the router
sends and receives RIP packets. Both is the default.
When set to Both or Out Only, the router will broadcast its routing table periodically.
When set to Both or In Only, it will incorporate the RIP information that it receives.
When set to None, it will not send any RIP packets and will ignore any RIP packets
received.
RIP Version: This controls the format and the broadcasting method of the RIP packets that the
router sends. (It recognizes both formats when receiving.) By default, this is set for RIP-1.
RIP-1 is universally supported. RIP-1 is probably adequate for most networks, unless you
have an unusual network setup.
RIP-2 carries more information. Both RIP-2B and RIP-2M send the routing data in RIP-2
format.
RIP-2B uses subnet broadcasting.
RIP-2M uses multicasting.
Note
: Multicasting can reduce the load on non-router machines because they do not listen
to the RIP multicast address and will not receive the RIP packets. However, if one router
uses multicasting, then all routers on your network must use multicasting. For RIP-2B and
RIP-2M you can select the type of authentication as NONE or MD5. If MD5 is selected,
additional parameters need to be entered.
Use router as DHCP server—By default, the router will function as a DHCP (Dynamic Host
Configuration Protocol) server, providing TCP/IP configuration for all computers connected to the
router's LAN. If another device on your network will be the DHCP server, or if you will manually
configure all devices, select the Disable option under DHCP configuration. Select the DHCP
Relay option to configure the router as a DHCP relay.
DHCP Log - Click this button to see the IP addresses which have been allocated by the DHCP
Server to PCs and other DHCP clients.
Starting IP Address - This box specifies the first of the contiguous addresses in the IP address
pool. 192.168.1.2 is the default start address.
Page 72 / 238
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports
5-4
LAN Configuration
202-10085-01, March 2005
Ending IP Address - This box specifies the last of the contiguous addresses in the IP address
pool. 192.168.1.254 is the default ending address.
WINS Server - This box can specify the Windows NetBios Server IP if one is present in your
network.
Lease Time - This box specifies the Lease time to be given to the DHCP Clients.
Using the Firewall as a DHCP server
By default, the firewall will function as a DHCP (Dynamic Host Configuration Protocol) server,
allowing it to assign IP, DNS server, WWS Server, and default gateway addresses to all computers
connected to the firewall's LAN. The assigned default gateway address is the LAN address of the
firewall. IP addresses will be assigned to the attached PCs from a pool of addresses specified in
this menu. Each pool address is tested before it is assigned to avoid duplicate addresses on the
LAN.
For most applications, the default DHCP and TCP/IP settings of the firewall are satisfactory. See
“IP Configuration by DHCP
” on
page B-10
for an explanation of DHCP and information about
how to assign IP addresses for your network.
If another device on your network will be the DHCP server, or if you will manually configure the
network settings of all of your computers, clear the ‘Use firewall as DHCP server’ check box.
Otherwise, leave it checked.
Specify the pool of IP addresses to be assigned by setting the Starting IP Address and Ending IP
Address. These addresses should be part of the same IP address subnet as the firewall’s LAN IP
address. Using the default addressing scheme, you should define a range between 192.168.1.2 and
192.168.1.253, although you may wish to save part of the range for devices with fixed addresses.
The firewall will deliver the following parameters to any LAN device that requests DHCP:
An IP Address from the range you have defined
Subnet Mask
Gateway IP Address (the firewall’s LAN IP address)
Note:
If you change the LAN IP address of the firewall while connected through the
browser, you will be disconnected. You must then open a new connection to the new IP
address and log in again.
Page 73 / 238
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports
LAN Configuration
5-5
202-10085-01, March 2005
Primary DNS Server (if you entered a Primary DNS address in the Basic Settings menu;
otherwise, the firewall’s LAN IP address)
Secondary DNS Server (if you entered a Secondary DNS address in the Basic Settings menu)
WINS Server (if you entered a Secondary DNS address in the Basic Settings menu)
Using Address Reservation
When you specify a reserved IP address for a PC on the LAN, that PC will always receive the
same IP address each time it access the firewall’s DHCP server. Reserved IP addresses should be
assigned to servers that require permanent IP settings.
Figure 5-2:
Groups and Hosts Entry screen
To reserve an IP address, use the Groups and Hosts Entry screen (see
“Managing Groups and
Hosts” on page 6-20
).
Note
: The reserved address will not be assigned until the next time the PC contacts the firewall's
DHCP server. Reboot the PC or access its IP configuration and force a DHCP release and renew.
Page 74 / 238
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports
5-6
LAN Configuration
202-10085-01, March 2005
Multi Home LAN IPs
Click Multi Home LAN IPs Setup on the LAN IP Setup screen (see
Figure 5-1
) to invoke the
Secondary LAN IP Setup screens. This allows the firewall to act as a gateway to additional logical
subnets on your LAN. You can assign the firewall an IP address on each additional logical subnet.
Figure 5-3:
Secondary LAN IP Setup screens
Configuring Static Routes
Static Routes provide additional routing information to your firewall. Under normal
circumstances, the firewall has adequate routing information after it has been configured for
Internet access, and you do not need to configure additional static routes. You must configure
static routes only for unusual cases such as multiple firewalls or multiple IP subnets located on
your network.
Page 75 / 238
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports
LAN Configuration
5-7
202-10085-01, March 2005
From the Main Menu of the browser interface, under Advanced, click on Static Routes to view the
Static Route menu, shown below.
Figure 5-4.
Static Routes Summary Table and Add screens
To add or edit a Static Route:
1.
Click the Add button to open the Add/Edit Menu, shown below.
2.
Type a route name for this static route in the Route Name box under the table.
(This is for identification purpose only.)
3.
Select Private if you want to limit access to the LAN only. The static route will not be reported
in RIP.
4.
Select Active to make this route effective.
5.
Type the Destination IP Address of the final destination.
6.
Type the IP Subnet Mask for this destination.
If the destination is a single host, type 255.255.255.255.
7.
Type the Gateway IP Address, which must be a firewall on the same LAN segment as the
firewall.

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top