Filter
Top Products
3-1
v1.1, August 2010
Chapter 3
LAN Configuration
This chapter describes how to configure the advanced LAN features of your ProSafe Gigabit 8
Port VPN Firewall FVS318G, including the following sections:
• “Choosing the VPN Firewall DHCP Options” on this page
• “Configuring the LAN Setup Options” on page 3-2
• “Managing Groups and Hosts (LAN Groups)” on page 3-5
• “Configuring Multi Home LAN IP Addresses” on page 3-10
• “Configuring and Enabling the DMZ Port” on page 3-11
• “Configuring Static Routes” on page 3-14
• “Configuring Routing Information Protocol (RIP)” on page 3-17
Choosing the VPN Firewall DHCP Options
By default, the VPN firewall will function as a DHCP (Dynamic Host Configuration Protocol)
server, allowing it to assign IP, DNS server, WINS Server, and default gateway addresses to all
computers connected to the VPN firewall LAN. The assigned default gateway address is the LAN
address of the VPN firewall. IP addresses will be assigned to the attached PCs from a pool of
addresses that you must specify. Each pool address is tested before it is assigned to avoid duplicate
addresses on the LAN. The DHCP options are available for both the LAN and DMZ settings.
For most applications, the default DHCP and TCP/IP settings of the VPN firewall are satisfactory.
See the link to “TCP/IP Networking Basics” in Appendix C, “Related Documents for an
explanation of DHCP and information about how to assign IP addresses for your network.
If another device on your network will be the DHCP server, or if you will manually configure the
network settings of all of your computers, clear the Enable DHCP server radio box by selecting
the Disable DHCP Server radio box. Otherwise, leave it checked.
Specify the pool of IP addresses to be assigned by setting the starting IP address and ending IP
address. These addresses should be part of the same IP address subnet as the VPN firewall’s LAN
IP address. Using the default addressing scheme, you should define a range between 192.168.1.2
and 192.168.1.100, although you may wish to save part of the range for devices with fixed
addresses.