Page 66 / 414 Scroll up to view Page 61 - 65
LAN Configuration
66
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
The Known PCs and Devices table lists the entries in the network database. For each
computer or device, the following fields display:
Check box
.
Allows you to select the computer or device in the table.
Name
. The name of the computer or device. For computers that do not support the
NetBIOS protocol, the name is displayed as
Unknown
(you can edit the entry manually to
add a meaningful name). If the computer or device was assigned an IP address by the
DHCP server, then the name is appended by an asterisk.
IP Address
. The current IP address of the computer or device. For DHCP clients of the
wireless VPN firewall, this IP address does not change. If a computer or device is
assigned a static IP address, you need to update this entry manually after the IP address
on the computer or device has changed.
MAC Address
. The MAC address of the computer or device’s network interface.
Group
. Each computer or device can be assigned to a single LAN group. By default, a
computer or device is assigned to Group 1. You can select a different LAN group from the
Group drop-down list in the Add Known PCs and Devices section or on the Edit Groups
and Hosts screen.
Profile Name
. Each computer or device can be assigned to a single VLAN. By default, a
computer or device is assigned to the default VLAN (VLAN 1). You can select a different
VLAN profile name from the Profile Name drop-down list in the Add Known PCs and
Devices section or on the Edit Groups and Hosts screen.
Action
. The Edit table button, which provides access to the Edit Groups and Hosts
screen.
Add Computers or Devices to the Network Database
To add computers or devices manually to the network database:
1.
In the Add Known PCs and Devices section of the LAN Groups screen (see the previous
figure), enter the settings as explained in the following table:
Table 11.
Add Known PCs and Devices section settings
Setting
Description
Name
Enter the name of the computer or device.
IP Address Type
From the drop-down list, select how the computer or device receives its IP address:
Fixed (set on PC)
.
The IP address is statically assigned on the computer or
device.
Reserved (DHCP Client)
. The DHCP server of the wireless VPN firewall always
assigns the specified IP address to this client during the DHCP negotiation (see
also
Set Up DHCP Address Reservation
on page 69).
Note:
For both types of IP addresses, the wireless VPN firewall reserves the IP
address for the associated MAC address.
Page 67 / 414
LAN Configuration
67
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
2.
Click the
Add
table button to add the computer or device to the Known PCs and Devices
table.
3.
As an optional step: To save the binding between the IP address and MAC address for the
entry that you just added to the Known PCs and Devices table, select the check box for the
table entry, and click the
Save Binding
button.
Note:
The saved binding is also displayed on the IP/MAC Binding screen
(see
Figure 97
on page 181).
Edit Computers or Devices in the Network Database
To edit computers or devices manually in the network database:
1.
In the Known PCs and Devices table of the LAN Groups screen (see the previous
figure), click the
Edit
table button of a table entry. The Edit LAN Groups screen displays
(see the following figure, which contains an example).
IP Address
Enter the IP address that this computer or device is assigned to:
• If the IP address type is Fixed (set on PC), the IP address needs to be outside of
the address range that is allocated to the DHCP server pool to prevent the IP
address from also being allocated by the DHCP server.
• If the IP address type is Reserved (DHCP Client), the IP address can be inside or
outside the address range that is allocated to the DHCP server pool.
Note:
Make sure that the IP address is in the IP subnet for the VLAN profile that
you select from the Profile Name drop-down list.
MAC Address
Enter the MAC address of the computer’s or device’s network interface. The MAC
address format is six colon-separated pairs of hexadecimal characters (0–9 and
a–f), such as 01:23:d2:6f:89:ab.
Group
From the drop-down list, select the group to which the computer or device is
assigned. (Group 1 is the default group.)
Profile Name
From the drop-down list, select the name of the VLAN profile to which the computer
or device is assigned.
Table 11.
Add Known PCs and Devices section settings (continued)
Setting
Description
Page 68 / 414
LAN Configuration
68
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Figure 34.
2.
Modify the settings as explained in
Table 11
on page 66.
3.
Click
Apply
to save your settings in the Known PCs and Devices table.
Deleting Computers or Devices from the Network Database
To delete one or more computers or devices from the network database:
1.
On the LAN Groups screen (see
Figure 33
on page 65), select the check box to the left
of each computer or device that you want to delete, or click the
Select All
table button
to select all computers and devices.
2.
Click the
Delete
table button.
Note:
If you delete a saved binding between an IP and MAC address on
the LAN Groups screen, make sure that you also delete the binding
on the IP/MAC Binding screen (see
Figure 97
on page 181).
Change Group Names in the Network Database
By default, the groups are named Group1 through Group8. You can change these group
names to be more descriptive, such as GlobalMarketing and GlobalSales. However, note that
on the Content Filtering screen (see
Configure Content Filtering
on page 174), the default
group names are displayed and not the names that you specified.
To edit the names of any of the eight available groups:
1.
Select
Network Configuration > LAN Setup >
LAN Groups
.
The LAN Groups screen
displays (see
Figure 33
on page 65, which shows some examples in the Known PCs
and Devices table).
Page 69 / 414
LAN Configuration
69
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
2.
Click the
Edit Group Names
option arrow to the right of the LAN submenu tabs. The
Network Database Group Names screen displays. (The following figure shows some
examples.)
Figure 35.
3.
Select the radio button next to the group name that you want to edit.
4.
Type a new name in the field. The maximum number of characters is 15. Do not use a
double quote (''), single quote('), or space in the name.
5.
Repeat
Step 3
and
Step 4
for any other group names.
6.
Click
Apply
to save your settings.
Set Up DHCP Address Reservation
When you specify a reserved IP address for a computer or device on the LAN (based on the
MAC address of the device), that computer or device always receives the same IP address
each time it accesses the wireless VPN firewall’s DHCP server. Reserved IP addresses
should be assigned to servers or access points that require permanent IP address settings.
The reserved IP address that you select needs to be outside of the DHCP server pool.
To reserve and bind an IP address to a MAC address, select
Reserved (DHCP Client)
from
the IP Address Type drop-down list on the LAN Groups screen and save the binding by
clicking the Save Binding button on the same screen. For detailed steps, see
Add Computers
or Devices to the Network Database
on page 66.
Note:
The reserved address is not assigned until the next time the
computer or device contacts the wireless VPN firewall’s DHCP
server. Reboot the computer or device, or access its IP configuration
and force a DHCP release and renew.
Page 70 / 414
LAN Configuration
70
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Note:
The saved binding is also displayed on the IP/MAC Binding screen
(see
Figure 97
on page 181).
Manage the IPv6 LAN
An IPv6 LAN typically functions with site-local and link-local unicast addresses. Each
physical interface requires an IPv6 link-local address that is automatically derived from the
MAC addresses of the IPv4 interface and that is used for address configuration and neighbor
discovery. (Normally, you would not manually configure a link-local address.)
Traffic with site-local or link-local addresses is never forwarded by the wireless VPN firewall
(or by any other router), that is, the traffic remains in the LAN subnet and is processed over
the default VLAN only. A site-local address always starts with FEC0 (hexadecimal); a
link-local unicast address always starts with FE80 (hexadecimal). To forward traffic from
sources with a site local or link-local unicast address in the LAN, a DHCP server is required.
For more information about link-local unicast addresses, see
Configure ISATAP Automatic
Tunnelling
on page 42.
Because each interface is automatically assigned a link-local IP address, it is not useful to
assign another link-local IP address as the default IPv6 LAN address. The default IPv6 LAN
address is a site-local address. You can change this address to any other IPv6 address for
LAN use.
Note:
Site-local addresses, that is, addresses that start with FEC0, have
been depreciated. However, NETGEAR has implemented a
site-local address as a
temporary
default IPv6 LAN address that you
can replace with another LAN address. The firewall restricts external
communication of this default site-local address.
DHCPv6 Server Options
The IPv6 clients in the LAN can autoconfigure their own IPv6 address or obtain an IPv6
address through a DHCPv6 server. For the LAN, there are three DHCPv6 options:
Stateless DHCPv6 Server
The IPv6 clients in the LAN generate their own IP address by using a combination of locally
available information and router advertisements, but receive DNS server information from the
DHCPv6 server. For stateless DHCPv6, you need to configure the RADVD and
advertisement prefixes (see
Configure the IPv6 Router Advertisement Daemon and
Advertisement Prefixes for the LAN
on page 77).

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top