Multi-Tech Systems RF600, RF660, RF760 Network Cards , IP Aliases

Chapter 6 – RouteFinder Software
Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/600VPN User Guide (PN S000323D) 85
Network Setup > Interface
Network Cards
About Network Card 1 (LAN eth0)
Network Card 1 is the interface to the internal network (LAN). The information was entered during initial
installation. This can be changed.
About Network Card 2 (WAN eth1)
Network Card 2 is the interface to the external network (Internet). This network card (eth1)
About Network Card 3 (DMZ eth2)
This network card (eth2) is the interface to the optional DMZ network. A DMZ (De-militarized Zone) is a
special LAN on the public network side of a firewall to allow a single WAN router to support both private
(VPN) and public access to resources. Using a DMZ allows one IP Address (computer) to be exposed to
the Internet. Some applications require multiple TCP/IP ports to be open. A DMZ allows just one computer
to be exposed for that purpose. It is recommended that you set your computer with a static IP to use DMZ.
Effect of Changes
When you make a change that affects other administration functions and configurations, an informational
screen displays. It tells you that the network interface you have just changed is used in several other
configurations, and then the configurations affected by this change are listed for you. If the automatic
changes are acceptable, continue editing. If the automatic changes are not acceptable, click your browser‘s
Back button and continue.
Name
Enter a definition of the network card into the Name entry field.
IP Address and Subnet Mask
Enter the IP address and the corresponding Subnet Mask into the appropriate entry fields. For example:
Network Card 1 (LAN eth0) Network Card 2 (WAN eth1) Network Card 3 (DMZ eth2)
Name (Description): LAN
IP Address: 192.168.2.1
Subnet Mask: 255.255.255.0
Name (Description): WAN
IP Address: 192.168.100.1
Subnet Mask: 255.255.255.0
Name (Description): DMZ
IP Address: 192.168.3.1
Subnet Mask: 255.255.255.0
Caution: When entering a new IP address for Network Card 1, it is possible to “lock yourself out“. If you
do, in most cases you will need to reinstall the RouteFinder to re-establish access.
Proxy ARP on This Interface
If you check the Proxy ARP on This Interface checkbox, the RouteFinder will automatically announce
itself as responsible for all packets to destinations for which it has an Interface Route. You can use this
function to "half-bridge" a network into another LAN segment.
Note: All packet filtering rules still apply when Proxy ARP is enabled. This is not a full bridging function!
If the Proxy ARP on This Interface function is activated, the RouteFinder will relay the ARP protocol on this
network card for all the networks known to it. This means that the RouteFinder will accept and forward
packets on the Proxy ARP interface for all other directly connected networks.
This function is necessary in some special cases; e.g., when the correct routes for a network cannot be set
and the network has to be passed on through the firewall. This can be the case if you have no access to
the router of your Internet provider.
A Possible Error: The Interfaces menu doesn’t contain entry fields for all the network cards.
Possible Cause of Error: The missing network card was added after the installation of the RouteFinder,
or it wasn’t recognized during installation.
Solution: Reinstall the RouteFinder software. You can use the backup feature (described earlier in this
chapter) to transfer your configuration between the installations.
NIC Type, MAC Address, IRQ, and IO Port Info
This information defaults into the corresponding fields.
Save
Confirm your settings by clicking the Save button.
IP Aliases
From this part of the Interfaces screen you can add RouteFinder network interface IP Aliases. IP aliases can be
used to assign additional IP addresses to a network card. The RouteFinder will treat the additional addresses
as equals to the primary network card addresses. IP aliases are required to administer several logical networks
on one network card. They can also be necessary in connection with the SNAT function to assign additional
addresses to the firewall. Up to 100 additional addresses can be configured on each network card.
Interface
From the drop down list box, select the network name to which you want to assign an alias.
IP Address
Enter the network IP address for the network named.
Netmask
Enter the Netmask to be used for this network.
Save
Click the Save button.
Delete IP Alias
An IP alias is deleted by highlighting it in the table and then clicking the Delete button.