Page 41 / 240 Scroll up to view Page 36 - 40
ProSafe VPN Firewall 200 FVX538 Reference Manual
Connecting the FVX538 to the Internet
2-15
v1.0, March 2009
IP address will be, and the address can change frequently—hence, the need for a commercial
DDNS service, which allows you to register an extension to its domain, and restores DNS requests
for the resulting FQDN to your frequently-changing IP address.
After you have configured your account information in the firewall, whenever your ISP-assigned
IP address changes, your firewall will automatically contact your DDNS service provider, log in to
your account, and register your new IP address.
For auto-rollover mode, you will need a fully qualified domain name (FQDN) to implement
features such as exposed hosts and virtual private networks regardless of whether you have a
fixed or dynamic IP address.
For load balancing mode, you may still need a fully qualified domain name (FQDN) either for
convenience or if you have a dynamic IP address.
To configure Dynamic DNS:
1.
Select
Network Configuration
from the primary menu and
Dynamic DNS
from the sub-
menu. The
Dynamic DNS Configuration
screen will display.
The
WAN Mode
section displays the currently configured WAN mode (for example, Single
Port WAN1, Load Balancing or Auto Rollover). Only those options that match the configured
WAN Mode will be accessible.
Note:
If your ISP assigns a private WAN IP address such as 192.168.x.x or 10.x.x.x, the
dynamic DNS service will not work because private addresses will not be routed
on the Internet.
Page 42 / 240
ProSafe VPN Firewall 200 FVX538 Reference Manual
2-16
Connecting the FVX538 to the Internet
v1.0, March 2009
2.
Click the tab of the Dynamic DNS Service you want to enable. Each DNS service provider
requires registration and you then configure its parameters on the corresponding tab page.
3.
Access the Web site of one of the DDNS service providers and set up an account. A link to
each DDNS provider is to the right of the tab pages.
4.
After setting up your account, return to the
Dynamic DNS Configuration
screen and fill in
the required fields for the DDNS service you selected:
a.
In the Host and Domain Name field, enter the entire FQDN name that your dynamic DNS
service provider gave you (for example: <
yourname>
.dyndns.org).
b.
Enter the User Name, User email Address, or Account Name requested by the DDNS
Service to identify you when logging into your DDNS account.
c.
Enter the Password, or User Key, for your DDNS account.
d.
If your dynamic DNS provider allows the use of wild cards in resolving your URL, you
may check the
Use wildcards
radio box to activate this feature.
Figure 2-7
Page 43 / 240
ProSafe VPN Firewall 200 FVX538 Reference Manual
Connecting the FVX538 to the Internet
2-17
v1.0, March 2009
For example, the wildcard feature will cause
*.yourhost.dyndns.org
to be aliased
to the same IP address as
yourhost.dyndns.org
5.
Click
Apply
to save your configuration.
6.
Click
Reset
to return to the previous settings.
Configuring the Advanced WAN Options (If Needed)
To configure the Advanced WAN options:
1.
If you haven’t already, log in to the firewall at the default LAN address of
default user name of
admin
, and default password of
password
(or whatever password and
LAN address you have chosen for the firewall).
2.
Select
Network Configuration
from the primary menu and
WAN Settings
from the sub-
menu. The
WAN Settings
screen will display. Click
Advanced
to access the
WAN1
Advanced Options
screen.
3.
Edit the default information you want to change.
MTU Size
– The normal MTU (Maximum Transmit Unit) value for most Ethernet
networks is 1500 Bytes, or 1492 Bytes for PPPoE connections. For some ISPs you may
have to reduce the MTU. But this is rarely required, and should not be done unless you are
sure it is necessary for your ISP connection.
Figure 2-8
Page 44 / 240
ProSafe VPN Firewall 200 FVX538 Reference Manual
2-18
Connecting the FVX538 to the Internet
v1.0, March 2009
Port Speed
– In most cases, your router can automatically determine the connection speed
of the Internet (WAN) port. If you cannot establish an Internet connection and the Internet
LED blinks continuously, you may have to manually select the port speed. AutoSense is
the default.
If you know that the Ethernet port on your broadband modem supports 100BaseT, select
100M; otherwise, select 10M. Use the half-duplex settings unless you are sure you need
full duplex.
Router's MAC Address
– Each computer or router on your network has a unique 32-bit
local Ethernet address. This is also referred to as the computer's MAC (Media Access
Control) address. The default is
Use default address
. However, if your ISP requires MAC
authentication, then select either
Use this Computer's MAC address to have the router use the MAC address of the
computer you are now using, or
Use This MAC Address to manually type in the MAC address that your ISP expects.
The format for the MAC address is XX:XX:XX:XX:XX:XX (numbers 0-9 and either
uppercase or lowercase letters A-F). If you select
Use This MAC Address
and then type
in a MAC address, your entry will be overwritten.
Page 45 / 240
LAN Configuration
3-1
v1.0, March 2009
Chapter 3
LAN Configuration
This chapter describes how to configure the advanced LAN features of your ProSafe VPN Firewall
200, including the following sections:
“Choosing the Firewall DHCP Options” on page 3-1
“Managing Groups and Hosts (LAN Groups)” on page 3-6
“Configuring and Enabling the DMZ Port” on page 3-10
“Static Routes” on page 3-12
Choosing the Firewall DHCP Options
By default, the firewall will function as a DHCP (Dynamic Host Configuration Protocol) server,
allowing it to assign IP, DNS server, WINS Server, and default gateway addresses to all computers
connected to the firewall LAN. The assigned default gateway address is the LAN address of the
firewall. IP addresses will be assigned to the attached PCs from a pool of addresses specified in
this menu. Each pool address is tested before it is assigned to avoid duplicate addresses on the
LAN. The DHCP options are available for both the LAN and DMZ settings.
For most applications, the default DHCP and TCP/IP settings of the firewall are satisfactory. See
the link to “Preparing a Computer for Network Access” in
Appendix D, “Related Documents”
for
an explanation of DHCP and information about how to assign IP addresses for your network.
If another device on your network will be the DHCP server, or if you will manually configure the
network settings of all of your computers, clear the
Enable DHCP server
radio box by selecting
the
Disable DHCP Server
radio box. Otherwise, leave it checked.
Specify the pool of IP addresses to be assigned by setting the Starting IP Address and Ending IP
Address. These addresses should be part of the same IP address subnet as the firewall’s LAN IP
address. Using the default addressing scheme, you should define a range between 192.168.1.2 and
192.168.1.100, although you may wish to save part of the range for devices with fixed addresses.
The firewall will deliver the following parameters to any LAN device that requests DHCP:
An IP Address from the range you have defined.
Subnet Mask.
Gateway IP Address (the firewall’s LAN IP address).

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top