Dual Ethernet ProxyServer User Guide
Configuration 2 - Existing Dual-LAN with Router
Another typical configuration ties the private LAN (LAN 1) to an existing Internet Services Network, which already provides Internet services. This configuration provides firewall and gateway security for the LAN users, and supports Internet access restrictions based on IP address, client protocols, or a list of forbidden sites.
Internet
IP Address 192.168.0.101
Mask 255.255.255.0
LAN 1
Private
Internet LAN
IP Address 204.26.12.9
Mask 255.255.255.0Router
IP address
204.26.12.10
LAN 2
Public
HUB
NovellTM Server
IP Address 192.168.0.102
Windows NT TM Server IP Address
192.168.0.103
Mail Server | Workstation |
IP Address | IP Address |
192.168.0.104 | 192.168.0.105 |
Workstation IP Address 192.168.0.107
Workstation IP Address 192.168.0.106
HUB
Private LAN
Web Server | FTP Server | Video Server |
IP Address | IP Address | IP Address |
204.26.12.20 | 204.26.12.30 | 204.26.12.40 |
Internet Services
Network
Figure 4-2. Existing Dual-LAN with Router Configuration
In the configuration shown in Figure
During the loading of the Firewall software, the Secured LAN Port Parameters group (in the IP Setup dialog box) was configured to include an IP Address of 192.168.0.101, and a default Net Mask of 255.255.2.55.0 for the private LAN (LAN 1). The Internet LAN Port Parameters group was configured with the DHCP Client option disabled, and the static IP Address of 204.26.12.10 was entered. This address is the existing static IP address that had already been assigned to the Internet Services Network router. A Net Mask of 255.255.255.0 was then entered to complete the configuration of the public LAN (LAN 2).
26