IPv4 and IPv6 Internet and WAN Settings

36

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308

Figure 16.

6.

If your connection is PPTP or PPPoE, your ISP requires an initial login. Enter the settings as

described in the following table:

Table 3.

PPTP and PPPoE settings

Setting

Description

Austria (PPTP)

Note:

For login

and password

information, see

Step

3

and

Step

4

.

If your ISP is Austria Telecom or any other ISP that uses PPTP for login, select this

radio button, and enter the following settings:

Account Name

The account name is also known as the host name or system name.

Enter the valid account name for the PPTP connection (usually your

email ID assigned by your ISP). Some ISPs require you to enter

your full email address here.

Domain Name

Your domain name or workgroup name assigned by your ISP, or

your ISP’s domain name. You can leave this field blank.

Idle Timeout

Select the

Keep Connected

radio button to keep the connection

always on. To log out after the connection is idle for a period, select

the

Idle Timeout

radio button and, in the Idle Timeout field, enter the

number of minutes to wait before disconnecting. This is useful if your

ISP charges you based on the period that you have logged in.

My IP Address

The IP address assigned by the ISP to make the connection with the

ISP server.

Server IP

Address

The IP address of the PPTP server.

IPv4 and IPv6 Internet and WAN Settings

37

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308

7.

In the Internet (IP) Address section of the screen (see the following figure), configure the IP

address settings as described in the following table. Click the

Current IP Address

link to

see the assigned IP address.

Figure 17.

Other (PPPoE)

Note:

For login

and password

information, see

Step

3

and

Step

4

.

If you have installed login software, your connection type is PPPoE. Select this radio

button, and enter the following settings:

Account Name

The valid account name for the PPPoE connection.

Domain Name

The name of your ISP’s domain or your domain name if your ISP

has assigned one. You can leave this field blank.

Idle Timeout

Select the

Keep Connected

radio button to keep the connection

always on. To log out after the connection is idle for a period, select

the

Idle Timeout

radio button and, in the Idle Timeout field, enter the

number of minutes to wait before disconnecting. This is useful if your

ISP charges you based on the period that you have logged in.

Connection

Reset

Select the

Connection Reset

check box to specify a time when the

PPPoE WAN connection is reset, that is, the connection is

disconnected momentarily and then reestablished. Then specify the

disconnect time and delay.

Disconnect

Time

Specify the hour and minutes when the connection

should be disconnected.

Delay

Specify the period in seconds after which the

connection should be reestablished.

Table 3.

PPTP and PPPoE settings (continued)

Setting

Description

IPv4 and IPv6 Internet and WAN Settings

38

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308

8.

In the Domain Name Server (DNS) Servers section of the screen (see the following figure),

specify the DNS settings as described in the following table.

Figure 18.

Table 4.

Internet IP address settings

Setting

Description

Get Dynamically

from ISP

If your ISP has not assigned you a static IP address, select the

Get Dynamically from

ISP

radio button. The ISP automatically assigns an IP address to the VPN firewall using

DHCP network protocol.

Client Identifier

If your ISP requires client identifier information to assign an IP

address using DHCP, select the

Client Identifier

check box,

and enter the client identifier information in the field.

Vendor Class Identifier

If your ISP requires the vendor class identifier information to

assign an IP address using DHCP, select the

Vendor Class

Identifier

check box.

Use Static IP

Address

If your ISP has assigned you a fixed (static or permanent) IP address, select the

Use

Static IP Address

radio button, and enter the following settings:

IP Address

The static IP address assigned to you. This address identifies

the VPN firewall to your ISP.

IP Subnet Mask

The subnet mask is usually provided by your ISP.

Gateway IP Address

The IP address of the ISP’s gateway is usually provided by

your ISP.

IPv4 and IPv6 Internet and WAN Settings

39

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308

9.

Click

Apply

to save your changes.

10.

Click

Test

to evaluate your entries. The VPN firewall attempts to make a connection

according to the settings that you entered.

11.

Verify the connection:

a.

Select

Network Configuration > WAN Settings > WAN Setup

. The WAN Setup

screen displays the IPv4 settings (see

Figure

14

on page

34).

b.

In the Action column, click the

Status

button of the WAN interface for which you

want to display the Connection Status pop-up screen. (The following figure shows a

PPPoE configuration; the IP addresses are not related to any other examples in this

manual.)

Figure 19.

The Connection Status screen should show a valid IP address and gateway, and you are

connected to the Internet. If the configuration was not successful, see

Troubleshoot the

ISP Connection

on page

396.

Table 5.

DNS server settings

Setting

Description

Get Automatically

from ISP

If your ISP has not assigned any Domain Name Server (DNS) addresses, select the

Get Automatically from ISP

radio button.

Use These DNS

Servers

If your ISP has assigned DNS addresses, select the

Use These DNS Servers

radio

button. Make sure that you fill in valid DNS server IP addresses in the fields. Incorrect

DNS entries might cause connectivity issues.

Primary DNS Server

The IP address of the primary DNS server.

Secondary DNS Server

The IP address of the secondary DNS server.

IPv4 and IPv6 Internet and WAN Settings

40

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308

Note:

If your ISP requires MAC authentication and another MAC address has

been previously registered with your ISP, you need to enter that

address on the WAN Advanced Options screen for the WAN interface

(see

Configure Advanced WAN Options and Other Tasks

on page

71).

Configure Load Balancing or Auto-Rollover for IPv4

Interfaces

You can configure the VPN firewall’s IPv4 interfaces on a mutually exclusive basis for either

auto-rollover (for increased system reliability) or load balancing (for maximum bandwidth

efficiency). If you do not select load balancing, you need to specify one WAN interface as the

primary interface.

The VPN firewall supports the following modes for IPv4 interfaces:

•

Load balancing mode

. The VPN firewall distributes the outbound traffic equally among

the WAN interfaces that are functional. You can configure up to four WAN interfaces. The

VPN firewall supports weighted load balancing and round-robin load balancing (see

Configure Load Balancing Mode and Optional Protocol Binding for IPv4

Interfaces

on

page

41).

Note:

Scenarios could arise in which load balancing needs to be bypassed

for certain traffic or applications. If certain traffic needs to travel on a

specific WAN interface, configure protocol binding rules for that

WAN interface. The rule should match the desired traffic.

•

Primary WAN mode

. The selected WAN interface is made the primary interface. The

other three interfaces are disabled.

•

Auto-rollover mode

. The selected WAN interface is defined as the primary link, and

another interface needs to be defined as the rollover link. The remaining two interfaces

are disabled. As long as the primary link is up, all traffic is sent over the primary link.

When the primary link goes down, the rollover link is brought up to send the traffic. When

the primary link comes back up, traffic automatically rolls back to the original primary link.

If you want to use a redundant ISP link for backup purposes, select the WAN port that

should function as the primary link for this mode. Ensure that the backup WAN port has

also been configured and that you configure the WAN failure detection method on the

WAN Advanced Options screen to support auto-rollover (see

Configure the Auto-Rollover

Mode and Failure Detection Method for IPv4

Interfaces

on page

45).

Note:

If the VPN firewall functions in IPv4 / IPv6 mode, you cannot

configure load balancing.