HP SuperStack Firewall Series Instrukcja Użytkownika Pobierz pdf (Strona 117)

Setting Static Routes 117

■

Firewall’s WAN link is connected directly to the Internet router — Use

this setting if the Firewall is protecting the entire network. This is the

default setting.

Click Update to save the configuration.

■

Specified address ranges are attached to the LAN link — Select this

when it is easier to specify which devices are on the LAN. If a

machine’s IP address is not specified, all communications through the

Firewall for that machine are blocked.

Click Update to save the configuration.

■

Specified address ranges are attached to the WAN link — Select this

when it is easier to specify which devices are on the WAN port.

Click Update to save the configuration.

Add Range

To enter a range of addresses, such as the 51 IP addresses from

192.168.23.50

192.168.23.100

, type the starting address in the

From Address box and the ending address in the To Addr ess box. To

specify an individual address, type it in the From Address box only. You

can specify up to 64 address ranges.

Click the Update button to save the configuration.

Setting Static

Routes

If the LAN has internal routers, you must specify their addresses and

network information.

Use static routes if the LAN is segmented into subnets, either for size or

practical considerations. For example, you can create a subnet which only

contains an organization’s graphic design shop, isolating it from traffic on

therestoftheLAN.

This example is shown in Figure 53 below. Traffic on each network is

separated. PCs on the design shop network communicate with PCs on

the core network via router R2.PCsonthecorenetworkcommunicate

with PCs on the design network via the Firewall F then the router R2.

DUA1611-0AAA02.book Page 117 Thursday, August 2, 2001 4:01 PM

1 2 ... 112 113 114 115 116 117 118 119 120 121 122 ... 213 214

Brak uwag

HP SuperStack Firewall Series Instrukcja Użytkownika Strona 117