ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

LAN Configuration

3-11

v1.0, October 2008

3.

Enter a route name for this static route in the

Route Name

field (for identification and

management).

4.

Select

Active

to make this route effective.

5.

Select

Private

if you want to limit access to the LAN only.

The static route will not be advertised in RIP.

6.

Enter the

Destination IP Address

to the host or network where the route leads.

7.

Enter the

IP Subnet Mask

for this destination.

If the destination is a single host, enter 255.255.255.255.

8.

Enter the

Interface

which is the physical network interface (WAN or LAN) through which

this route is accessible.

9.

Enter the

Gateway IP Address

through which the destination host or network can be reached.

This must be a firewall on the same LAN segment as the firewall.

10.

Enter the

Metric

priority for this route.

If multiple routes to the same destination exits, the route with the lowest metric is chosen

(value must be between 1 and 15).

11.

Click

Apply

to save your settings.

The new static route will be added to the Static Route table.

Configuring Routing Information Protocol (RIP)

RIP (Routing Information Protocol, RFC 2453) is an Interior Gateway Protocol (IGP) that is

commonly used in internal networks (LANs). It allows a router to exchange its routing information

automatically with other routers, and allows it to dynamically adjust its routing tables and adapt to

changes in the network. RIP is disabled by default.

To configure RIP parameters:

1.

Select

Network Configuration > Routing

from the main/sub-menu.

2.

Click the

RIP Configuration

link to the right of the tab.

ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

3-12

LAN Configuration

v1.0, October 2008

The RIP Configuration menu displays.

3.

From the

RIP Direction

pull-down menu, choose the direction in which the firewall will send

and receive RIP packets. The choices are:

•

None

. The firewall neither broadcasts its route table nor does it accept any RIP packets

from other routers. This effectively disables RIP.

•

In Only

. The firewall accepts RIP information from other routers, but does not broadcast

its routing table.

•

Out Only

. The firewall broadcasts its routing table periodically but does not accept RIP

information from other routers.

•

Both

. The firewall broadcasts its routing table and also processes RIP information

received from other routers.

4.

From the

RIP Version

pull-down menu, choose the version from the following options:

•

Disabled

. The default section disables RIP versions.

•

RIP-1

. A class-based routing that does not include subnet information. This is the most

commonly supported version.

Figure 3-7

ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

LAN Configuration

3-13

v1.0, October 2008

•

RIP-2

. This includes all the functionality of RIPv1 plus it supports subnet information.

Though the data is sent in RIP-2 format for both RIP-2B and RIP-2M, the modes in which

packets are sent are different.

–

RIP-2B

. Sends the routing data in RIP-2 format and uses subnet broadcasting.

–

RIP-2M

. Sends the routing data in RIP-2 format and uses multicasting.

5.

Authentication for RIP2B/2M required?

If you selected RIP-2B or RIP-2M, check the

Yes

feature, and input the

First Key Parameters

and

Second Key Parameters,

MD-5 keys to authenticate between firewalls.

6.

Click

Add

to save your settings.

ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

3-14

LAN Configuration

v1.0, October 2008

ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual

Wireless Configuration

4-1

v1.0, October 2008

Chapter 4

Wireless Configuration

This chapter describes how to set up your ProSafe Wireless-N VPN Firewall SRXN3205 for

wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b/

g/n or 802.11a/n wireless adapters to do such things as connect to the Internet, or access printers

and files on your LAN.

You need to prepare these four things before you can establish a connection through your wireless

firewall:

•

The firewall connected to your LAN through the WAN port to a device such as a hub, switch,

router, or Cable/DSL gateway.

•

A correctly set up ProSafe Wireless-N VPN Firewall for wireless access

•

One or more computers with properly configured 802.11b/g/n or 802.11a/n wireless adapters.

•

A location for the SRXN3205 that conforms to the

“Wireless Equipment Placement and Range

Guidelines”

.

You will use the following topics to set up your ProSafe Wireless-N VPN Firewall for use as a

wireless firewall:

•

“Basic Wireless Setup (No Security)” on page 4-4

•

“Completing Wireless Setup (No Security)” on page 4-5

•

“Wireless Security Types and Settings” on page 4-8

•

“Advanced Wireless Settings” on page 4-17

•

“Wireless Equipment Placement and Range Guidelines” on page 4-2

Note:

Indoors, computers can connect over 802.11b/g/n or 802.11a/g/n wireless networks

at ranges of several hundred feet or more. This distance can allow for others

outside your area to access your network. It is important to take appropriate steps

to secure your network from unauthorized access. The firewall provides highly

effective security features which are covered in detail in

“SSID and WEP/WPA

Settings Setup Form” on page 4-9

. Deploy the security features appropriate to your

needs.