Page 111 / 342 Scroll up to view Page 106 - 110
VLAN Support
Nokia IP45 Security Platform User’s Guide v4.0
111
4.
To delete, click Erase next to the VLAN.
A confirmation message appears
5.
Click OK.
The VLAN is deleted.
6.
Click Ports.
The Ports page opens.
7.
From the DMZ/WAN2 menu option, select DMZ.
8.
Click Apply.
Configuring DHCP Relay
Nokia IP45 v4.0 supports the DHCP relay feature. By using this feature, DHCP requests are
forwarded to a specified DHCP server, which is located in a different subnet. This server relays
the responses back to the DHCP clients.
This feature allows central management of IP address allocations across an enterprise network.
You can also perform DHCP over a VPN tunnel.
To configure DHCP relay
1.
Choose Network from the main menu.
The Internet page opens.
2.
Click My Network.
Page 112 / 342
6
Managing your Local Area Network
112
Nokia IP45 Security Platform User’s Guide v4.0
The My Network page opens.
You can configure the DHCP relay IP address for both LAN and DMZ from this page.
3.
Click Edit next to LAN/DMZ
The Edit Network Settings page opens.
4.
Select Relay from the DHCP Server drop-down list.
The Edit Network Settings page opens (example window for LAN).
5.
Select Relay from DHCP Server drop-down list.
6.
Enter the IP address of the Primary DHCP Server
7.
Enter the IP address of the Secondary DHCP Server
8.
Click Apply.
The DHCP relay IP address for LAN/DMZ is configured.
Page 113 / 342
VLAN Support
Nokia IP45 Security Platform User’s Guide v4.0
113
Backing Up DHCP Relay
A DHCP Relay is used when DHCP clients are located on a different subnet than the DHCP
server. When in DHCP relay mode, the IP45 appliance becomes a DHCP relay agent, which
relays DHCP messages between clients and servers on different subnets, and even across VPN
tunnels.
The IP45 appliance allows to configure a secondary DHCP relay that acts as a backup. When the
primary DHCP relay fails to respond, the IP45 DHCP relay agent automatically relays DHCP
requests to the secondary server, ensuring continuous availability of this critical network
resource.
Backing Up DHCP Relay by Using CLI
The following are the commands to set the DHCP relay backup on LAN and DMZ interfaces:
set interface lan [
dhcprelayip1
dhcprelayip1] [
dhcprelayip2
dhcprelayip2]
set interface dmz [
dhcprelayip1
dhcprelayip1] [
dhcprelayip2
dhcprelayip2]
The following are the commands to show the LAN and DMZ interfaces that are configured for
DHCP relay backup:
show interface lan [
dhcprelayip1
dhcprelayip1] [
dhcprelayip2
dhcprelayip2]
show interface dmz [
dhcprelayip1
dhcprelayip1] [
dhcprelayip2
dhcprelayip2]
For more information about DHCP relay backup commands, see the
Nokia IP45 Security
Platform CLI Reference Guide Version 4.0.
Changing IP Addresses
You can change the IP address of your Nokia IP45 security platform. You can also change the
entire range of IP addresses in your network by using the IP45 Satellite X licenses. You might
want to do this if, for example, you are adding the IP45 to a large existing network and do not
want the network IP address range to change, or if you are using a DHCP server other than the
IP45, that assigns addresses within a different range.
If you change the IP address of your IP45, you might have to manually change the network
interface TCP/IP setting when you use static IP, or renew the DHCP lease when you use
dynamic IP.
To change the IP addresses in your network
1.
Choose Network from the main menu, and click My Network.
2.
Enter new values in the Internal Network Range fields.
Page 114 / 342
6
Managing your Local Area Network
114
Nokia IP45 Security Platform User’s Guide v4.0
3.
To reset the network to its default settings with the DHCP server enabled and the internal
network range is 192.168.10.1, click Default.
4.
Click Apply.
You can see the following changes:
±
If you changed the internal network range to X.X.X.X, the IP address of the IP45 is
changed to X.X.X.1.
±
If you chose to reset the network to its default settings, the settings are reset.
5.
Do one of the following:
±
If your computer is configured to obtain its IP address automatically (by using DHCP),
and the DHCP server in your IP45 is enabled, restart your computer. Your computer
obtains an IP address in the new range.
±
Otherwise, manually reconfigure your computer to use the new address range by using
the TCP/IP settings.
Configuring Network Objects
The IP45 v4.0 supports defining network objects for single computers, and networks. You can
configure static NAT, and DHCP reservation by using this feature.
Note
NAT is enabled by default. NAT can only be disabled in IP45 Satellite X licenses. If NAT is
disabled, you need to buy an IP address range.
Configuring Static NAT
Static NAT allows mapping of Internet IP addresses and address ranges to hosts inside a
network. You can assign separate public IP addresses to both server and client residing on the
same network. To allow incoming traffic to a host for which static NAT is defined, You must
create an Allow rule.
Note
While specifying firewall rules to such hosts, use the internal IP address of the host. Do not
use the Internet IP address to which the host IP address is mapped.
To configure static NAT for a single computer
1.
Choose Network from the IP45 main menu.
The Internet page opens.
2.
Click Network Objects.
Page 115 / 342
VLAN Support
Nokia IP45 Security Platform User’s Guide v4.0
115
The Network Objects page opens.
3.
Click New.
The Network Object wizard with Network Object Type window opens.
4.
To configure static NAT for single computer, select Single Computer.
5.
Click Next

Rate

3.5 / 5 based on 2 votes.

Popular Nokia Models

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top