ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

3-6

LAN Configuration

v1.0, October 2008

2.

Click the

LAN Groups

tab and the LAN Groups

tab displays.

The

Known PCs and Devices

table lists the entries in the LAN Groups Database. For each

computer or device, the following fields are displayed:

•

Name

. The name of the PC or device. For computers that do not support the NetBIOS

protocol, this will be listed as “Unknown” (you can edit the entry manually to add a

meaningful name). If the computer was assigned an IP address by the DHCP server, then the

Name will be appended by an asterisk.

•

IP Address

. The current IP address of the computer. For DHCP clients of the firewall, this IP

address will not change. If a computer is assigned a static IP addresses, you will need to update

this entry manually if the IP address on the computer has been changed.

•

MAC Address

. The MAC address of the PC’s network interface.

•

Group

. Each PC or device can be assigned to a single group. By default, a computer is

assigned to Group 1, unless a different group is chosen from the Group pull-down menu.

•

Action

. Allows modification of the selected entry by clicking

Edit

.

Adding Devices to the LAN Groups Database

To add devices manually to the LAN Groups Database, follow these steps:

1.

In the

Add Known PCs and Devices

section, make the following entries:

•

Name

. Enter the name of the PC or device.

Figure 3-2

ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

LAN Configuration

3-7

v1.0, October 2008

•

IP Address Type

. From the pull-down menu, choose how this device receives its IP

address. The choices are:

–

Fixed (Set on PC)

. The IP address is statically assigned on the computer.

–

Reserved (DHCP Client)

. Directs the firewall’s DHCP server to always assign the

specified IP address to this client during the DHCP negotiation.

•

IP Address.

Enter the IP address that this computer or device is assigned in the IP

Address

field. If the IP Address Type is Reserved (DHCP Client), the firewall will reserve

the IP address for the associated MAC address.

•

MAC Address.

Enter the MAC address of the computer’s network interface in the MAC

Address

field. The MAC address format is six colon-separated pairs of hexadecimal

characters (0-9 and A-F), such as 01:23:45:67:89:AB.

•

Group.

From the pull-down menu, select the LAN Group to which the computer will be

assigned. (Group 1 is the default group.)

2.

Click

Add.

The device will be added to the

Known PCs and Devices

table.

Changing Group Names in the LAN Groups Database

By default, the LAN Groups are named Group1 through Group8. You can rename these group

names to be more descriptive, such as Engineering or Marketing.

To edit the names of any of the eight available groups:

1.

From the

LAN Groups

tab, click the

Edit Group Names

link to the right of the tabs.

The

Network Database Group Names

tab

appears.

Note:

When assigning a Reserved IP address to a client, the IP address selected must

be outside the range of addresses allocated to the DHCP server pool.

ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

3-8

LAN Configuration

v1.0, October 2008

2.

Select the radio button next to any group name to make that name active for editing.

3.

Type a new name in the field.

4.

Click

Apply

to save your setting, each time you change a name in the field. {{Possible bug}}

5.

Select and edit other group names if desired.

6.

Click

Apply

to save each field change.

Configuring Multi Home LAN IP Addresses

If you have computers on your LAN using different IP address ranges (for example, 172.16.2.0 or

10.0.0.0), you can add “aliases” to the LAN port, giving computers on those networks access to the

Internet through the firewall. This allows the firewall to act as a gateway to additional logical

subnets on your LAN. You can assign the firewall an IP address on each additional logical subnet.

To add a secondary LAN IP address, follow these steps:

1.

Select

Network Configuration > LAN Setup

from the main/sub-menu.

Figure 3-3

ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

LAN Configuration

3-9

v1.0, October 2008

2.

Click the

LAN Multi-homing

tab and the LAN Multi-homing screen displays.

The

Available Secondary LAN IPs

table lists the secondary LAN IP addresses added to the

firewall.

•

IP Address

. The “alias,” an additional IP address hosted by the LAN port of the firewall.

This address will be the gateway for computers on the secondary subnet.

•

Subnet Mask

. The IPv4 subnet mask that defines the range of the secondary subnet.

3.

In the

Add Secondary LAN IP Address

section, enter the additional IP address and subnet

mask to be assigned to the LAN port of the firewall.

4.

Click

Add.

The new Secondary LAN IP address will appear in the

Available Secondary LAN

IPs

table.

Figure 3-4

Note:

IP addresses on these secondary subnets cannot be configured in the DHCP

server. The hosts on the secondary subnets must be manually configured with

IP addresses, gateway IP addresses, and DNS server IP addresses.

Tip:

The secondary LAN IP address will be assigned to the LAN interface of the

firewall and can be used as a gateway by computers on the secondary subnet.

ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

3-10

LAN Configuration

v1.0, October 2008

Configuring

S

tatic Routes

Static Routes provide additional routing information to your firewall. Under normal

circumstances, the firewall has adequate routing information after it has been configured for

Internet access, and you do not need to configure additional static routes. You should configure

static routes only for unusual cases such as multiple firewalls or multiple IP subnets located on

your network.

To add or edit a static route:

1.

Select

Network Configuration > Routing

from the main/sub-menu.

The Routing

screen displays.

2.

Click

Add

and the

Add Static Route

tab is displayed.

Figure 3-5

Figure 3-6