Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

4-6

Serial Port Configuration

December 2003, M-10041-01M-10207-01, Reference Manual v2

Configuring LAN-to-LAN Settings

LAN-to-LAN enables direct communications between two FVS328 firewalls.

Figure 4-4: LAN-to-LAN network configuration

Basic Requirements for LAN-to-LAN Connections

Serial port LAN-to-LAN configurations require these elements:

1.

An ISDN or analog phone line with an active ISDN or dial-up ISP account.

2.

A serial modem properly configured and attached to the DB9 connector on the serial port.

3.

A broadband connection to one FVS328 for LAN-to-LAN auto-rollover Internet access.

4.

The LAN-to-LAN settings configured and applied to the two FVS328 firewalls.

How to Configure LAN-to-LAN Connections

Follow the steps below to configure a serial port LAN-to-LAN connection.

1.

Configure a serial port modem according to the instructions above.

2.

From the main menu, click

LAN-to-LAN

in the Serial Port section.

Firewall A

Firewall B

192.168.3.1

192.168.0.1

Serial Connection

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

Serial Port Configuration

4-7

December 2003, M-10041-01M-10207-01, Reference Manual v2

Figure 4-5:

LAN-to-LAN configuration menu

3.

Configure the LAN-to-LAN settings.

Note:

The LAN subnet address of each FVS328 must be different.

4.

Click

Apply

for the changes to take effect.

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

4-8

Serial Port Configuration

December 2003, M-10041-01M-10207-01, Reference Manual v2

WAN and LAN Configuration

5-1

December 2003, M-10041-01

Chapter 5

WAN and LAN Configuration

This chapter describes how to configure the WAN and LAN settings of your FVS328 ProSafe

VPN Firewall with Dial Back-up.

Configuring LAN IP Settings

The LAN IP Setup menu allows configuration of LAN IP services such as DHCP and RIP. These

features can be found under the Advanced heading in the Main Menu of the browser interface.

The firewall is shipped preconfigured to use private IP addresses on the LAN side, and to act as a

DHCP server. The firewall’s default LAN IP configuration is:

•

LAN IP addresses—192.168.0.1

•

Subnet mask—255.255.255.0

These addresses are part of the IETF-designated private address range for use in private networks,

and should be suitable in most applications. If your network has a requirement to use a different IP

addressing scheme, you can make those changes.

The LAN TCP/IP Setup parameters are:

•

IP Address

This is the LAN IP address of the firewall.

•

IP Subnet Mask

This is the LAN Subnet Mask of the firewall. Combined with the IP address, the IP Subnet

Mask allows a device to know which other addresses are local to it, and which must be reached

through a gateway or router.

•

RIP Direction

RIP (Router Information Protocol) allows a router to exchange routing information with other

routers. The RIP Direction selection controls how the firewall sends and receives RIP packets.

Both is the default.

—

When set to Both or Out Only, the firewall will broadcast its routing table periodically.

—

When set to Both or In Only, it will incorporate the RIP information that it receives.

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

5-2

WAN and LAN Configuration

December 2003, M-10041-01

—

When set to None, it will not send any RIP packets and will ignore any RIP packets

received.

•

RIP Version

This controls the format and the broadcasting method of the RIP packets that the router sends.

It recognizes both formats when receiving. By default, this is set for RIP-1.

—

RIP-1 is universally supported. RIP-1 is probably adequate for most networks, unless you

have an unusual network setup.

—

RIP-2 carries more information. Both RIP-2B and RIP-2M send the routing data in RIP-2

format.

—

RIP-2B uses subnet broadcasting.

—

RIP-2M uses multicasting.

Using the Router as a DHCP Server

By default, the firewall will function as a DHCP (Dynamic Host Configuration Protocol) server,

allowing it to assign IP, DNS server, and default gateway addresses to all computers connected to

the router's LAN. The assigned default gateway address is the LAN address of the firewall. IP

addresses will be assigned to the attached PCs from a pool of addresses specified in this menu.

Each pool address is tested before it is assigned to avoid duplicate addresses on the LAN.

For most applications, the default DHCP and TCP/IP settings of the firewall are satisfactory. See

“IP Configuration by DHCP” on page C-10

for an explanation of DHCP and information about

how to assign IP addresses for your network.

If another device on your network will be the DHCP server, or if you will manually configure the

network settings of all of your computers, clear the ‘Use router as DHCP server’ check box.

Otherwise, leave it checked.

Specify the pool of IP addresses to be assigned by setting the Starting IP Address and Ending IP

Address. These addresses should be part of the same IP address subnet as the firewall’s LAN IP

address. Using the default addressing scheme, you should define a range between 192.168.0.2 and

192.168.0.253, although you may wish to save part of the range for devices with fixed addresses.

Note:

If you change the LAN IP address of the firewall while connected through the

browser, you will be disconnected. You must then open a new connection to the new IP

address and log in again.