Page 51 / 249 Scroll up to view Page 46 - 50
Getting Started
46
Alternatively, to set up your CyberGuard SG appliance and PC for auto-configuration:
Before continuing, ensure your DHCP server has two free leases.
One will be used for
the Web Management Console, the other for your PC.
Note
It is highly recommended that you reserve the IP address to be used by the Web
Management Console using the CyberGuard SG appliance’s MAC address.
In bridged
mode, this will be the top MAC address of the three displayed on the CyberGuard SG
appliance itself.
Figure 2-17
Check the
DHCP assigned
check box.
Anything in
IP Address / Netmask
will be
ignored.
You may also enter one or more
DNS Server(s)
to be used by the CyberGuard SG
appliance, not your PC, for Internet name resolution, however DNS server addresses
handed out by your DHCP server will take precedence.
Click
Apply
and
Reboot
.
Page 52 / 249
Getting Started
47
Next, configure your PC to obtain its network settings automatically from your LAN DHCP
server.
Click
Start
->
Settings
->
Control Panel
and double click
Network Connections
.
Right click on
Local Area Connection
(or appropriate network connection for the newly
installed PCI appliance) and select
Properties
.
Select
Internet Protocol (TCP/IP)
and click
Properties
and click
Properties
.
Figure 2-18
Check
Obtain an IP address automatically
, check
Obtain DNS server address
automatically
and click
OK
.
Attach your CyberGuard SG appliance’s Ethernet port to your LAN’s hub.
If you cannot
connect to PCs on your LAN, reboot your PC.
You are now finished.
Page 53 / 249
Getting Started
48
Disabling the Reset Button on your CyberGuard SG PCI
Appliance
For convenience, the CyberGuard SG appliance ships with the rear panel Reset button
enabled.
This allows the CyberGuard SG appliance’s configuration to be reset to factory
defaults.
From a network security standpoint, it may be desirable to disable the Reset switch after
initial setup has been performed.
This is accomplished by removing the jumper linking
CON2
on the CyberGuard SG appliance.
This jumper is labeled
Remove Link to Disable Erase
.
Page 54 / 249
Network Connections
49
3. Network Connections
This chapter describes the
Network Setup
section of the Web Management Console.
Here you can configure each of your CyberGuard SG appliance’s network ports
(Ethernet, serial).
Network ports may be configured for Internet connection, LAN
connection, DMZ connection, remote dialin access or Internet failover.
If you are using a CyberGuard SG gateway or rack mount appliance, the section
Set up
the PCs on your LAN to access the Internet
in the chapter entitled
Getting Started
describes how to configure the PCs on your LAN to share the connection once your
Internet connection has been established.
Connections
Under the
Connections
tab, each of the network ports of your CyberGuard SG appliance
is displayed alongside its
Device Name
and current
Configuration
.
Initially, all network
ports will be unconfigured, aside from a single LAN connection on the initial setup port
(switch
A
on the CyberGuard SG rack mount appliances, port
A1
on the SG560, SG565
and SG580, the
LAN
port on other models).
A network port is configured for different functions by selecting the new configuration
from the
Configuration
pull down menu.
Figure 3-1
The current configuration can be viewed or modified by selecting
Edit current settings
.
Selecting
Remove this network configuration
unconfigures a network port (you will be
prompted to confirm this action).
Page 55 / 249
Network Connections
50
If a port is experiencing difficulties auto-negotiating with another device, Ethernet speed
and duplex may be set manually by selecting
Edit Ethernet configuration
.
You may
also
Enable port based VLANs
from here, see the section entitled
Port based VLANs
towards the end of this chapter for details.
Multifunction vs. Fixed-function Ports
Some CyberGuard SG appliances have network ports with labels corresponding to the
port’s function, i.e.
LAN
,
DMZ
and
Internet
/
WAN
.
These are said to be
fixed-function
ports
.
Alternatively, some CyberGuard SG appliances have network ports that are generically
labeled, e.g. port
A
, port
B
, port
C
.
These are said to be
multifunction ports
.
This reflects
the ability of these ports to perform several different functions, e.g. port
B
may be
configured as a LAN connection or an Internet connection.
Note
Before beginning configuration of multifunction ports, you should have an idea of which
function you will be assigning to each of the ports.
Proceed to the section pertaining to your CyberGuard SG appliance for information on its
network ports and possible configurations.
SG710, SG710+: Multifunction Switches and Ports
CyberGuard SG rack mount appliances have generically named Ethernet ports and
switches (switches
A
and
B
, ports
C
,
D
,
E
and
F
), as any port or switch can be
configured to perform any function (LAN, WAN, DMZ, etc.).
Note
The switches’ ports can not be configured individually; a switch is configured with a single
function only (e.g., LAN switch, DMZ switch).
Switch
A
is special in that it is configured as a
Direct LAN
connection by default.
Aside
from this, network configuration options are similar to other CyberGuard SG appliances.

Rate

4 / 5 based on 3 votes.

Popular SnapGear Models

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top