Chapter 6 Network

IP Interfaces

Configuration Overview

IP interfaces provide the X family device with the interfaces to make the network connections required for your environment. An IP interface is the Layer 3 configuration for the device, that is, the IP configuration for its set of security zones (and hence Ethernet ports within the security zones). Before configuring the IP interfaces for the device, you need to determine the deployment mode that best meets network requirements: transparent, transparent DMZ (NAT/Routed LAN), or full-routed/NAT. For a description of these deployment modes, see “Deployment Modes” on page 131.

The device allows you to configure three types of IP interfaces: external, internal, and GRE. You can only configure one external interface on each device. For device maximum configurable values, see Appendix D‚ “Device Maximum Values”. Setting up the IP interfaces for a device is a three-step process:

STEP 1

STEP 2

STEP 3

For each IP interface, configure the IP address information. An interface is required for every IP subnet that is directly connected to the device. For example, you need one for the Internet connection (external interface) and one for every directly connected network subnet (internal interfaces).

For each IP interface, select the security zones that will use the configuration. Each security zone must be associated with an internal or external IP interface.

If necessary, configure the interface to perform routing using the advanced configuration options.

140 X Family LSM User’s Guide V 2.5.1