Netgear SRX5308 Specifications download pdf (Page 72)

LAN Configuration

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308

Set Up Address Reservation

When you specify a reserved IP address for a PC or device on the LAN (based on the MAC

address of the device), that PC or device always receives the same IP address each time it

accesses the VPN firewall’s DHCP server. Reserved IP addresses should be assigned to

servers or access points that require permanent IP address settings. The reserved IP

address that you select need to be outside of the DHCP server pool.

To reserve an IP address, select Reserved (DHCP Client) from the IP Address Type

drop-down list on the LAN Groups screen as described in Add PCs or Devices to the Network

Database on page 69 or on the Edit Groups and Hosts screen as described in Edit PCs or

Devices in the Network Database on page 70.

Note: The reserved address is not assigned until the next time the PC or

device contacts the VPN firewall’s DHCP server. Reboot the PC or

device, or access its IP configuration and force a DHCP release and

renew.

Configure and Enable the DMZ Port

The demilitarized zone (DMZ) is a network that, by default, has fewer firewall restrictions

when compared to the LAN. The DMZ can be used to host servers (such as a web server,

FTP server, or email server) and provide public access to them. The fourth LAN port on the

VPN firewall (the rightmost LAN port) can be dedicated as a hardware DMZ port to safely

provide services to the Internet without compromising security on your LAN. By default, the

DMZ port and both inbound and outbound DMZ traffic are disabled. Enabling the DMZ port

and allowing traffic to and from the DMZ increases the traffic through the WAN ports.

Using a DMZ port is also helpful with online games and videoconferencing applications that

are incompatible with NAT. The VPN firewall is programmed to recognize some of these

applications and to work correctly with them, but there are other applications that might not

function well. In some cases, local PCs can run the application correctly if those PCs are

used on the DMZ port.

Note: A separate firewall security profile is provided for the DMZ port that

is also physically independent of the standard firewall security

component that is used for the LAN.

The DMZ Setup screen lets you set up the DMZ port. It permits you to enable or disable the

hardware DMZ port (LAN port 4, see Front Panel on page 14) and configure an IP address

and subnet mask for the DMZ port.

1 2 ... 67 68 69 70 71 72 73 74 75 76 77 ... 356 357

No comments

Netgear SRX5308 Specifications Page 72