WatchGuard Technologies WatchGuard SOHO and SOHO | tc manual IP Address Table example

Page 57

What you will need

IP Address Table (example)

Item	Description		Assigned By

Public IP	The IP address that identifies the SOHO to the Internet.		ISP
Address

	Site A:	207.168.55.2
	Site B: 68.130.44.15
Public Subnet	The overlay of bits that determines which part of the IP		ISP
Mask	address identifies your network. For example, a Class C
	address licenses 256 addresses and has a netmask of
	255.255.255.0.
	Site A:	255.255.255.0
	Site B:	255.255.255.0
Local Network	A private network address used by an organization’s local		You
Address	network for identifying itself within the network. A local
	network address cannot be used as a public IP address.
	WatchGuard recommends using an address from one of the
	reserved ranges:
	10.0.0.0 — 255.0.0.0
	172.16.0.0 — 255.240.0.0
	192.168.0.0/16 — 255.255.0.0
	Site A:	255.255.255.0
	Site B: 255.255.255.0
Shared Secret	A phrase stored at both ends of the tunnel to authenticate		You
	the transmission as being from the claimed origin. The
	secret can be any phrase, but mixing numerical, special,
	alphabetical, and uppercase characters improves security.
	For example, “My1F@ult” is better than “myonefault”
	Site A:	OurLittleSecret
	Site B: OurLittleSecret
Encryption	Encryption method determines the length in bits of the key		You
Method	used to encrypt and decrypt communication packets. DES is
	a 56-bit encryption; 3DES is 168-bit, and therefore much
	more secure. It is also slower. Either 3DES or DES may be
	selected as long as both sides use the same method.
	Site A:	3DES
	Site B: 3DES
Authentication	Both sides must use the same method.		You
	Site A:	MD5
	Site B: MD5

User Guide 2.3

45

Image 57

Contents WatchGuard Soho User Guide Copyright and patent information Registration and identification informationUser Guide Iii WatchGuard Soho End-User License AgreementPage User Guide WatchGuard Limited Hardware Warranty User Guide Vii Welcome Redeeming Soho upgrade certificatesFollowing conventions are used throughout this guide Using this guidePage Table of Contents Additional Soho Features Installation Pre-installation checklistBefore you begin Determine your current TCP/IP settings Performing manual installationMicrosoft Windows 95 or 98 or ME Microsoft Windows NT orMacintosh Other operating systems Unix, LinuxDisable your browser’s Http proxy Internet Explorer Netscape 4.5 orCabling the Soho for one to four devices Physically connecting your SohoThis creates a connection between the Soho and the modem Cabling the Soho for more than four computers This creates a connection between the Soho and the modem Physically connecting your Soho How does a firewall work? Setting Up Your Soho NetworkNetwork addressing Configuring your public networkDouble-click the Network icon Configuring your public network Configuring the Soho public network for dynamic addressing Configuring the Soho public network for static addressing On your computerSelect the Obtain an IP address automatically option. Click Click Public Network On the SohoConfiguring Soho public network for PPPoE Click Automatically restore lost connections Release and renew the IP configurationConfiguring your private network Configure additional computers to the private network Changing the Soho system name and password Select System AdministrationSelect System Password Default factory settings Default factory settings Virtual Private Networking IPSec VPN is not installed Troubleshooting installation and network configurationWhere are the Soho settings stored? What do the on and Mode lights signify on the SOHO?How do I register my SOHO? How do I change to a Dhcp private IP address?How do I change to a static private IP address? How do I allow any incoming service?How do I set up and disable Web blocking? Click Services and then click Allowed Incoming ServicesHow do I allow incoming IP protocols? VPN Management How do I set up VPN between two SOHOs?How do I reboot my SOHO? How do I set up my Soho for remote configuration?How do I reset the Soho to factory defaults? How do I install a Soho using a Macintosh? Set a password on my unit, but I forgot it. Can you help?How does the seat limitation on the Soho work? How do I get to the Soho Knowledge Base?Cant get a certain Soho feature to work with a DSL modem What is a Soho feature key?How do I register for Live Security? How can I see the MAC address of my SOHO?Configuring Services for a Soho How does information travel on the internet?IP addresses WatchGuard Soho services ServicesProtocol Port numberNetwork address translation Allowing incoming servicesAdding a pre-configured incoming service Select Allowed Incoming ServicesClick Add a Service Adding an incoming TCP or UDP service Creating a custom incoming serviceClick Allowed Incoming Services. Click Add a Service Click Add Other TCP or UDP ServiceAdding an incoming service with another type of protocol Adding the Any serviceClick Add Other Service Removing an incoming service Click Add Any ServiceClick Allowed Incoming Services Blocking outgoing services Blocking a TCP or UDP serviceClick Remove a Service Click Block TCP or UDP Service Select Blocked Outgoing ServicesClick Blocked Outgoing Services Blocking an alternative protocolClick Remove Blocked Service Removing a blocked outgoing serviceWhy create a virtual private network? Configuring Virtual Private NetworkingOne WatchGuard Soho with VPN and an IPSec-compliant Device What you will needIP Address Table example Obtaining a VPN Feature Key About Feature KeysEnabling the VPN Feature Key Step-by-step instructions for configuring a Soho VPN tunnelSpecial considerations Why do I need a static public address? Frequently asked questionsHow do I get a static public IP address? How do I connect three or four offices together?How do I obtain a VPN Feature Key? How do I enable a VPN Tunnel?OK, ping is not working Frequently asked questions Socks for Soho Additional Soho FeaturesSoho Socks implementation Configuring your Socks application on the SohoDisabling Socks on the Soho Select Service OptionsSoho logging Setting a remote log hostViewing Soho log messages Click System InformationRebooting a WatchGuard Soho Click System AdministrationSelect Remote Logging Rebooting a WatchGuard Soho How WebBlocker works WatchGuard Soho WebBlockerWeb site in WebBlocker database Web site not in WebBlocker databaseWatchGuard WebBlocker database unavailable Bypassing the Soho WebBlockerConfiguring the Soho WebBlocker Purchasing and enabling Soho WebBlockerSelect Web Blocking WebBlocker categories Enter the full access passwordAlcohol/Tobacco Satanic/Cult Search Engines Click Check if the URL is on the CyberNOT List Searching for blocked sitesIndex Primary IP address 44 secondary IP address TCP UDP