Getting Started

46

Alternatively, to set up your CyberGuard SG appliance and PC for auto-configuration:

Before continuing, ensure your DHCP server has two free leases.

One will be used for

the Web Management Console, the other for your PC.

Note

It is highly recommended that you reserve the IP address to be used by the Web

Management Console using the CyberGuard SG appliance’s MAC address.

In bridged

mode, this will be the top MAC address of the three displayed on the CyberGuard SG

appliance itself.

Figure 2-17

Check the

DHCP assigned

check box.

Anything in

IP Address / Netmask

will be

ignored.

You may also enter one or more

DNS Server(s)

to be used by the CyberGuard SG

appliance, not your PC, for Internet name resolution, however DNS server addresses

handed out by your DHCP server will take precedence.

Click

Apply

and

Reboot

.

Getting Started

47

Next, configure your PC to obtain its network settings automatically from your LAN DHCP

server.

Click

Start

->

Settings

->

Control Panel

and double click

Network Connections

.

Right click on

Local Area Connection

(or appropriate network connection for the newly

installed PCI appliance) and select

Properties

.

Select

Internet Protocol (TCP/IP)

and click

Properties

and click

Properties

.

Figure 2-18

Check

Obtain an IP address automatically

, check

Obtain DNS server address

automatically

and click

OK

.

Attach your CyberGuard SG appliance’s Ethernet port to your LAN’s hub.

If you cannot

connect to PCs on your LAN, reboot your PC.

You are now finished.

Getting Started

48

Disabling the Reset Button on your CyberGuard SG PCI

Appliance

For convenience, the CyberGuard SG appliance ships with the rear panel Reset button

enabled.

This allows the CyberGuard SG appliance’s configuration to be reset to factory

defaults.

From a network security standpoint, it may be desirable to disable the Reset switch after

initial setup has been performed.

This is accomplished by removing the jumper linking

CON2

on the CyberGuard SG appliance.

This jumper is labeled

Remove Link to Disable Erase

.

Network Connections

49

3. Network Connections

This chapter describes the

Network Setup

section of the Web Management Console.

Here you can configure each of your CyberGuard SG appliance’s network ports

(Ethernet, serial).

Network ports may be configured for Internet connection, LAN

connection, DMZ connection, remote dialin access or Internet failover.

If you are using a CyberGuard SG gateway or rack mount appliance, the section

Set up

the PCs on your LAN to access the Internet

in the chapter entitled

Getting Started

describes how to configure the PCs on your LAN to share the connection once your

Internet connection has been established.

Connections

Under the

Connections

tab, each of the network ports of your CyberGuard SG appliance

is displayed alongside its

Device Name

and current

Configuration

.

Initially, all network

ports will be unconfigured, aside from a single LAN connection on the initial setup port

(switch

A

on the CyberGuard SG rack mount appliances, port

A1

on the SG560, SG565

and SG580, the

LAN

port on other models).

A network port is configured for different functions by selecting the new configuration

from the

Configuration

pull down menu.

Figure 3-1

The current configuration can be viewed or modified by selecting

Edit current settings

.

Selecting

Remove this network configuration

unconfigures a network port (you will be

prompted to confirm this action).

Network Connections

50

If a port is experiencing difficulties auto-negotiating with another device, Ethernet speed

and duplex may be set manually by selecting

Edit Ethernet configuration

.

You may

also

Enable port based VLANs

from here, see the section entitled

Port based VLANs

towards the end of this chapter for details.

Multifunction vs. Fixed-function Ports

Some CyberGuard SG appliances have network ports with labels corresponding to the

port’s function, i.e.

LAN

,

DMZ

and

Internet

/

WAN

.

These are said to be

fixed-function

ports

.

Alternatively, some CyberGuard SG appliances have network ports that are generically

labeled, e.g. port

A

, port

B

, port

C

.

These are said to be

multifunction ports

.

This reflects

the ability of these ports to perform several different functions, e.g. port

B

may be

configured as a LAN connection or an Internet connection.

Note

Before beginning configuration of multifunction ports, you should have an idea of which

function you will be assigning to each of the ports.

Proceed to the section pertaining to your CyberGuard SG appliance for information on its

network ports and possible configurations.

SG710, SG710+: Multifunction Switches and Ports

CyberGuard SG rack mount appliances have generically named Ethernet ports and

switches (switches

A

and

B

, ports

C

,

D

,

E

and

F

), as any port or switch can be

configured to perform any function (LAN, WAN, DMZ, etc.).

Note

The switches’ ports can not be configured individually; a switch is configured with a single

function only (e.g., LAN switch, DMZ switch).

Switch

A

is special in that it is configured as a

Direct LAN

connection by default.

Aside

from this, network configuration options are similar to other CyberGuard SG appliances.