Chapter 4 - Firewall Software
Configuration 3 - New Dual-LAN with T1 DSU
The final typical configuration adds Internet services to existing LAN users. With this configuration, the private LAN (LAN 1) is secured by the firewall while the Internet Services Network is outside the firewall allowing Internet users to access the public LAN (LAN 2) resources, such as the Web, FTP, etc. servers. The Internet connection is provided with a T1 DSU connected to the RS232 connection on the back of the unit.
Internet
T1 DSU
WAN Port
IP Address 192.168.0.101
Mask 255.255.255.0
HUB
NovellTM Server
IP Address 192.168.0.102
Windows NT TM Server IP Address
192.168.0.103
Mail Server IP Address 192.168.0.104
LAN 1 | LAN 2 | Internet LAN |
Private | Public | |
|
| IP address |
|
| 204.26.12.10 |
|
| HUB |
|
| Workstation |
|
|
| IP Address |
|
|
| 192.168.0.107 |
|
|
| Workstation |
|
|
| IP Address |
|
|
| 192.168.0.106 |
|
|
Workstation |
|
|
|
IP Address | Web Server | FTP Server | Video Server |
192.168.0.105 | |||
| IP Address | IP Address | IP Address |
| 204.26.12.20 | 204.26.12.30 | 204.26.12.40 |
Private LAN | Internet Services |
| Network |
Figure 4-3. New Dual-LAN with T1 DSU Configuration
In the configuration shown in Figure
During the loading of the Firewall software, the Secured LAN Port Parameters group (in the IP Setup dialog box) was configured to include an unregistered IP Address of 192.168.0.101 and default Net Mask of 255.255.255.0 for the private LAN (LAN 1).
27