ProSafe VPN Firewall 200 FVX538 Reference Manual

Connecting the FVX538 to the Internet

2-15

v1.0, March 2009

IP address will be, and the address can change frequently—hence, the need for a commercial

DDNS service, which allows you to register an extension to its domain, and restores DNS requests

for the resulting FQDN to your frequently-changing IP address.

After you have configured your account information in the firewall, whenever your ISP-assigned

IP address changes, your firewall will automatically contact your DDNS service provider, log in to

your account, and register your new IP address.

•

For auto-rollover mode, you will need a fully qualified domain name (FQDN) to implement

features such as exposed hosts and virtual private networks regardless of whether you have a

fixed or dynamic IP address.

•

For load balancing mode, you may still need a fully qualified domain name (FQDN) either for

convenience or if you have a dynamic IP address.

To configure Dynamic DNS:

1.

Select

Network Configuration

from the primary menu and

Dynamic DNS

from the sub-

menu. The

Dynamic DNS Configuration

screen will display.

The

WAN Mode

section displays the currently configured WAN mode (for example, Single

Port WAN1, Load Balancing or Auto Rollover). Only those options that match the configured

WAN Mode will be accessible.

Note:

If your ISP assigns a private WAN IP address such as 192.168.x.x or 10.x.x.x, the

dynamic DNS service will not work because private addresses will not be routed

on the Internet.

ProSafe VPN Firewall 200 FVX538 Reference Manual

2-16

Connecting the FVX538 to the Internet

v1.0, March 2009

2.

Click the tab of the Dynamic DNS Service you want to enable. Each DNS service provider

requires registration and you then configure its parameters on the corresponding tab page.

3.

Access the Web site of one of the DDNS service providers and set up an account. A link to

each DDNS provider is to the right of the tab pages.

4.

After setting up your account, return to the

Dynamic DNS Configuration

screen and fill in

the required fields for the DDNS service you selected:

a.

In the Host and Domain Name field, enter the entire FQDN name that your dynamic DNS

service provider gave you (for example: <

yourname>

.dyndns.org).

b.

Enter the User Name, User email Address, or Account Name requested by the DDNS

Service to identify you when logging into your DDNS account.

c.

Enter the Password, or User Key, for your DDNS account.

d.

If your dynamic DNS provider allows the use of wild cards in resolving your URL, you

may check the

Use wildcards

radio box to activate this feature.

Figure 2-7

ProSafe VPN Firewall 200 FVX538 Reference Manual

Connecting the FVX538 to the Internet

2-17

v1.0, March 2009

For example, the wildcard feature will cause

*.yourhost.dyndns.org

to be aliased

to the same IP address as

yourhost.dyndns.org

5.

Click

Apply

to save your configuration.

6.

Click

Reset

to return to the previous settings.

Configuring the Advanced WAN Options (If Needed)

To configure the Advanced WAN options:

1.

If you haven’t already, log in to the firewall at the default LAN address of

http://192.168.1.1,

default user name of

admin

, and default password of

password

(or whatever password and

LAN address you have chosen for the firewall).

2.

Select

Network Configuration

from the primary menu and

WAN Settings

from the sub-

menu. The

WAN Settings

screen will display. Click

Advanced

to access the

WAN1

Advanced Options

screen.

3.

Edit the default information you want to change.

•

MTU Size

– The normal MTU (Maximum Transmit Unit) value for most Ethernet

networks is 1500 Bytes, or 1492 Bytes for PPPoE connections. For some ISPs you may

have to reduce the MTU. But this is rarely required, and should not be done unless you are

sure it is necessary for your ISP connection.

Figure 2-8

ProSafe VPN Firewall 200 FVX538 Reference Manual

2-18

Connecting the FVX538 to the Internet

v1.0, March 2009

•

Port Speed

– In most cases, your router can automatically determine the connection speed

of the Internet (WAN) port. If you cannot establish an Internet connection and the Internet

LED blinks continuously, you may have to manually select the port speed. AutoSense is

the default.

If you know that the Ethernet port on your broadband modem supports 100BaseT, select

100M; otherwise, select 10M. Use the half-duplex settings unless you are sure you need

full duplex.

•

Router's MAC Address

– Each computer or router on your network has a unique 32-bit

local Ethernet address. This is also referred to as the computer's MAC (Media Access

Control) address. The default is

Use default address

. However, if your ISP requires MAC

authentication, then select either

–

Use this Computer's MAC address to have the router use the MAC address of the

computer you are now using, or

–

Use This MAC Address to manually type in the MAC address that your ISP expects.

The format for the MAC address is XX:XX:XX:XX:XX:XX (numbers 0-9 and either

uppercase or lowercase letters A-F). If you select

Use This MAC Address

and then type

in a MAC address, your entry will be overwritten.

LAN Configuration

3-1

v1.0, March 2009

Chapter 3

LAN Configuration

This chapter describes how to configure the advanced LAN features of your ProSafe VPN Firewall

200, including the following sections:

•

“Choosing the Firewall DHCP Options” on page 3-1

•

“Managing Groups and Hosts (LAN Groups)” on page 3-6

•

“Configuring and Enabling the DMZ Port” on page 3-10

•

“Static Routes” on page 3-12

Choosing the Firewall DHCP Options

By default, the firewall will function as a DHCP (Dynamic Host Configuration Protocol) server,

allowing it to assign IP, DNS server, WINS Server, and default gateway addresses to all computers

connected to the firewall LAN. The assigned default gateway address is the LAN address of the

firewall. IP addresses will be assigned to the attached PCs from a pool of addresses specified in

this menu. Each pool address is tested before it is assigned to avoid duplicate addresses on the

LAN. The DHCP options are available for both the LAN and DMZ settings.

For most applications, the default DHCP and TCP/IP settings of the firewall are satisfactory. See

the link to “Preparing a Computer for Network Access” in

Appendix D, “Related Documents”

for

an explanation of DHCP and information about how to assign IP addresses for your network.

If another device on your network will be the DHCP server, or if you will manually configure the

network settings of all of your computers, clear the

Enable DHCP server

radio box by selecting

the

Disable DHCP Server

radio box. Otherwise, leave it checked.

Specify the pool of IP addresses to be assigned by setting the Starting IP Address and Ending IP

Address. These addresses should be part of the same IP address subnet as the firewall’s LAN IP

address. Using the default addressing scheme, you should define a range between 192.168.1.2 and

192.168.1.100, although you may wish to save part of the range for devices with fixed addresses.

The firewall will deliver the following parameters to any LAN device that requests DHCP:

•

An IP Address from the range you have defined.

•

Subnet Mask.

•

Gateway IP Address (the firewall’s LAN IP address).