Page 91 / 126 Scroll up to view Page 86 - 90
91
GlobeSurfer
®
II 1.8 - 7.2 - 7.2 S
REFERENCE MANUAL
Assuming you have chosen DHCP Server, complete the following fields:
‘Start IP Address’
The first IP address that may be assigned to a LAN host. Since the gateway’s default IP address is 192.168.1.1,
this address must be 192.168.1.2 or greater.
‘End IP Address’
The last IP address in the range that can be used to automatically assign IP addresses to LAN hosts.
‘Subnet Mask’
A mask used to determine to what subnet an IP address belongs. An example of a subnet mask value is
255.255.0.0.
‘Lease Time In Minutes’
Each device will be assigned an IP address by the DHCP server for this amount of time, when it connects to the
network. When the lease expires the server will determine if the computer has disconnected from the network.
If it has, the server may reassign this IP address to a newly connected computer. This feature ensures that IP
addresses that are not in use will become available for other computers on the network.
‘Provide Host Name If Not Specified by Client’
If the DHCP client does not have a host name, the gateway will automatically assign one for him.
4.
Click ‘OK’ to save the settings.
6.6.10.2 DHCP relay settings
To configure a device as a DHCP relay, perform the following steps:
1.
Select the ‘DHCP Relay’ option in the ‘IP Address Distribution’ combo-box under the Service section (see Figure
6.53). The screen will refresh (see Figure 6.54).
Figure 6.53 DHCP relay choice
Figure 6.54 DHCP relay settings
Page 92 / 126
92
GlobeSurfer
®
II 1.8 - 7.2 - 7.2 S
REFERENCE MANUAL
2.
Click the ‘New IP Address’ link. The ‘DHCP Relay Server Address’ screen will appear (see Figure 6.55).
Figure 6.55 DHCP relay server
3.
Specify the IP address of the DHCP server.
4.
Click ‘OK’ to save the settings.
5.
Click ‘OK’ once more in the ‘DHCP Settings’ screen.
6.
Click the ‘Network Connections’ tab in the ‘Connection settings’ screen. The ‘Network Connections’ screen will
appear (see Figure 6.56).
Figure 6.56 Network connections
7.
Click the ‘WAN Cellular’ link. The ‘WAN Cellular Properties’ screen will appear (see Figure 6.57). Click the
‘Settings’ button to see the ‘Configure WAN Cellular’ page.
Figure 6.57 WAN Cellular properties
Page 93 / 126
93
GlobeSurfer
®
II 1.8 - 7.2 - 7.2 S
REFERENCE MANUAL
8.
In the ‘Routing’ section, select ‘Advanced’ from the combo-box. The screen will refresh (see Figure 6.58).
Figure 6.58 WAN cellular advanced
9.
In the ‘Routing Mode’ combo-box, select ”Route”. This will change GlobeSurfer
®
II’s WAN to work in routing
mode, which is necessary in order for DHCP relaying to function properly.
10. Click ‘OK’ to save the settings.
6.6.10.3 DHCP connections
To view a list of computers currently recognized by the DHCP server, press the ‘Connection List’ button that
appears at the bottom of the ‘IP Address Distribution’ screen (see Figure 6.51). The ‘DHCP Connections’ screen
will appear (see 7.334).
Figure 6.59 DHCP connections list
To define a new connection with a fixed IP address:
1. Click the ‘New Static Connection’ link. The ‘DHCP Connection Settings’ screen will appear (see Figure 6.60).
Figure 6.60 DHCP connection settings
2. Enter a host name for this connection.
3. Enter thefixed IP address that you would like to have assigned to the computer.
4. Enter the MAC address of the computer’s network card.
Page 94 / 126
94
GlobeSurfer
®
II 1.8 - 7.2 - 7.2 S
REFERENCE MANUAL
Note:
A device’s fixed IP address is actually assigned to the specific network card’s (NIC) MAC address installed
on the LAN computer. If you replace this network card then you must update the device’s entry in the DHCP
Connections list with the new network card’s MAC address.
5.
Click ‘OK’ to save the settings.
The ‘DHCP Connections’ screen will reappear (see Figure 6.61), displaying the defined static connection. This
connection can be edited or deleted using the standard action icons.
Figure 6.61 DCHP connections list static
6.6.11 DNS server
Domain Name System (DNS) provides a service that translates domain names into IP addresses and vice versa. GlobeSurfer
®
II’s DNS server is an auto-learning DNS, which means that when a new computer is connected to the network the DNS server
learns its name and automatically adds it to the DNS table. Other network users may immediately communicate with this
computer using either its name or its IP address. In addition GlobeSurfer
®
II’s DNS server:
Shares a common database of domain names and IP addresses with the DHCP server.
Supports multiple subnets within the LAN simultaneously.
Automatically appends a domain name to unqualified names.
Allows new domain names to be added to the database using GlobeSurfer
®
II’s WBM.
Permits a computer to have multiple host names.
Permits a host name to have multiple IPs (needed if a host has multiple network cards).
The DNS server does not require configuration. However, you may wish to view the list of computers known by the DNS, edit
the host name or IP address of a computer on the list, or manually add a new computer to the list.
6.6.11.1 Viewing and Modifying the DNS Table
Figure 6.62 DNS server
To view the list of computers stored in the DNS table. Access the DNS Server settings by clicking the ‘DNS Server’
icon in the ‘Advanced’ screen. The DNS table will be displayed (see Figure 6.62).
To add a new entry to the list:
1. Click the ‘New DNS Entry’ button. The ‘DNS Entry’ screen will appear (see Figure 6.63).
2. Enter the computer’s host name and IP address.
Page 95 / 126
95
GlobeSurfer
®
II 1.8 - 7.2 - 7.2 S
REFERENCE MANUAL
3. Click ‘OK’ to save the settings.
Figure 6.63 New DNS entry
To edit the host name or IP address of an entry:
1. Click the ‘Edit’ button that appears in the Action column. The ‘DNS Entry’ screen will appear (see Figure 6.63)
2. If the host was manually added to the DNS Table then you may modify its host name and/or IP address,
otherwise you may only modify its host name.
3. Click ‘OK’ to save the settings.
To remove a host from the DNS table:
1.
Click the ‘Delete’ button that appears in the Action column. The entry will be removed from the table.
6.6.12 IPSEC Internet Protocol Security
Internet Protocol Security (IPSec) is a series of guidelines for the protection of Internet Protocol (IP) communications. It
specifies procedures for securing private information transmitted over public networks. The IPSec protocols include:
AH (Authentication Header) provides packet-level authentication.
ESP (Encapsulating Security Payload) provides encryption and authentication.
IKE (Internet Key Exchange) negotiates connection parameters, including keys, for the other two services.
Services supported by the IPSec protocols (AH, ESP) include confidentiality (encryption), authenticity (proof of sender), integrity
(detection of data tampering), and replay protection (defense against unauthorized resending of data).
IPSec also specifies methodologies for key management. Internet Key Exchange (IKE), the IPSec key management protocol,
defines a series of steps to establish keys for encrypting and decrypting information; it defines a common language on
which communications between two parties is based. Developed by the Internet Engineering Task Force (IETF), IPSec and IKE
together standardize the way data protection is performed, thus making it possible for security systems developed by different
vendors to interoperate.
Technical specifications
Security architecture for the Internet Protocol
IP Security Document Roadmap
Connection type: Tunnel, Transport
Use of Internet Security Association and Key Management Protocol (ISAKMP) in main and aggressive modes
Key management: Manual, Automatic (Internet Key Exchange)
NAT Traversal Negotiation for resolution of NATed tunnel endpoint scenarios
Dead Peer Detection for tunnel disconnection in case the remote endpoint ceases to operate
Gateway authentication: X.509, RSA signatures and pre-shared secret key
IP protocols: ESP, AH
Encryption: AES, 3DES, DES, NULL, HW encryption integration (platform dependent)
Authentication: MD5, SHA-1
IP Payload compression
Interoperability: VPNC Certified IPSec, Windows 2000, Windows NT, FreeS/WAN, FreeBSD, Checkpoint
Firewall-1, Safenet SoftRemote, NetScreen, SSH Sentinel

Rate

4 / 5 based on 2 votes.

Popular Option Models

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top