NETGEAR SRX5308-100NAS Switch User Manual


 
LAN Configuration
113
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
3. Click Apply to save your settings.
DMZ Port for IPv6 Traffic
The DMZ Setup (IPv6) screen lets you set up the DMZ port for IPv6 traffic. You can enable or
disable the hardware DMZ port (LAN port 4; see Front Panel on page 17) for IPv6 traffic and
configure an IPv6 address and prefix length for the DMZ port.
The IPv6 clients in the DMZ can autoconfigure their own IPv6 address or obtain an IPv6
address through a DHCPv6 server.
For the DMZ, there are two DHCPv6 server options:
S
tateless DHCPv6 server. The IPv6 clients in the DMZ generate their own IP address by
using a combination of locally available information and router advertisements, but
receive DNS server information from the DHCPv6 server. For stateless DHCPv6, you
need to configure the RADVD and advertisement prefixes (see Configure the IPv6 Router
Advertisement Daemon and Advertisement Prefixes for the DMZ on p
age 117).
Enable LDAP
information
To enable the DHCP server to provide Lightweight Directory Access Protocol
(LDAP) server information, select the Enable LDAP information check box. Enter
the following settings.
LDAP Server The IP address or name of the LDAP server.
Search Base The search objects that specify the location in the directory tree
from which the LDAP search begins. You can specify multiple
search objects, separated by commas. The search objects
include:
• CN (for common name)
• OU (for organizational unit)
• O (for organization)
• C (for country)
• DC (for domain)
For example, to search the Netgear.net domain for all last
na
mes of Johnson, you would enter:
cn=Johnson,dc=Netgear,dc=net
Port The port number for the LDAP server. The default setting is 0
(zero).
DNS Proxy
Enable DNS Proxy This setting is optional. To enable the VPN firewall to provide a LAN IP address for
DNS address name resolution, select the Enable DNS Proxy check box. This
check box is selected by default.
Note: When the DNS Proxy option is disabled,
all DHCP clients receive the DNS
IP addresses of the ISP but without the DNS proxy IP address.
Table 22. DMZ Setup screen settings for IPv4 (continued)
Setting Description