Double-click the Network icon | WatchGuard Technologies SOHO

Configuring Your External Network

method to distribute IP addresses is to use Dynamic Host Configuration Protocol (DHCP). When you connect your computer to the network, a DHCP server at your ISP automatically assigns it a network IP address. This eliminates the ISP from having to manually assign and manage IP addresses.

IP address assignments can be either dynamic or static. With dynamic, your ISP assigns your computer a new address every time you connect. When you power down, you release the address, and it may be reassigned. An IP address that is static, on the other hand, belongs to your computer at all times whether or not you are currently using it. No other computer anywhere on the network shares the same address.

Athird way of assigning addresses is called PPPoE (Point-to-Point Protocol over Ethernet). PPPoE combines some of the advantages of Ethernet and PPP by simulating a standard Dial-Up connection. It is popular among many ISPs because it enables them to use existing Dial-Up infrastructure such as billing, authentication, and security for DSL and cable modems.

Determining whether your ISP uses dynamic or static addressing

Most ISPs support both dynamic and static addressing. To determine if your connection to the Internet is dynamic or static:

1Click Start => Settings => Control Panel.

The Control Panel window appears.

2Double-click the Network icon.

The Network dialog box appears.

38

Image 38

Contents

WatchGuard Soho User Guide Page Using this guide Following conventions are used throughout this guide CE Notice Certifications and NoticesFCC Certification Industry Canada Taiwanese Notice Vcci Notice Class a ITE Declaration of Conformity WatchGuard End-User License Agreement Page User Guide WatchGuard Limited Hardware Warranty User Guide Copyright and Patent Information Table of Contents Your Administrative Options Configuring Virtual Private Networking Page Introduction Welcome Registration and Identification Information How does a firewall work? How does a firewall work? Protocol How does information travel on the internet?IP Addresses Port number Network Address Translation NAT ServicesHow does the Soho process this information? Default Factory Settings Soho Home Page-System Status Resetting a Soho to the Factory Defaults Firewall Settings Rebooting a WatchGuard Soho Base Model Soho Rebooting a WatchGuard Soho Rebooting a WatchGuard Soho Pre-installation checklist Before you begin Installation Process Microsoft Windows 95 or 98 or ME Determine your current TCP/IP settingsMicrosoft Windows NT or Macintosh Disable your browser’s Http proxy Exit the TCP/IP configuration screen Netscape Netscape 6/6.1 Cabling the Soho for one to four devices Physically connecting your SohoInternet Explorer 5.0/5.5 Installation Process Cabling the Soho for more than four computers This creates a connection between the Soho and the modem Installation Process Configuring Your External Network Network addressing Double-click the Network icon TCP/IP Properties dialog box appears Configuring the Soho External network for dynamic addressing Configuring the Soho External network for static addressing On your computer On the Soho External Configuring the Soho external network for PPPoE From the Configuration Mode drop list, select PPPoE Client Click Automatically restore lost connections Release and renew the IP configuration Routes Configuring Your Trusted NetworkConfigure the Trusted network with static addresses Configure additional computers to the trusted network Configuring Static Routes View the Network Statistics Network Statistics View the Network Statistics Your Administrative Options System Security Setting a System Administrator Name and System Passphrase = System Security Setting up VPN Manager Access = VPN Manager Access Click the Submit button = Update Update Your Configuration from a Non- Windows PlatformRedeeming your Soho upgrade certificates = Upgrade Upgrade certificates Seat Licenses View the Configuration File = View Configuration File View the Configuration File Firewall settings Configuring Incoming and Outgoing Services Pre-configured Services Incoming or Outgoing Creating a Custom Service IP Protocols Custom ServiceTCP and UDP Ports Blocking External Sites Blocked Sites Firewall Options Firewall Options Ping requests received on the External Network Denying FTP access to the Trusted Network interface Socks implementation for the Soho Configure your Socks application Logging all allowed outbound traffic Disabling Socks on the Soho Creating a virtual DMZ DMZ Creating a virtual DMZ Creating a virtual DMZ What is Logging? Viewing Soho log messages Setting a WatchGuard Security Event Processor log host Wsep Logging Our example Setting a Syslog Host Syslog Logging Setting the System Time System Time If you have decided to use the WatchGuard Time Server Setting the System Time Setting the System Time WatchGuard Soho WebBlocker How WebBlocker works WatchGuard WebBlocker database unavailable Web site not in WebBlocker databaseWeb site in WebBlocker database WebBlocker Users and Groups Purchasing and enabling Soho WebBlocker Bypassing the Soho WebBlocker Settings Configuring the Soho WebBlockerEnable WebBlocker Enter the Inactivity Timeout in minutes Create WebBlocker Groups and Users Groups To the right of the Users field, click the New button Click the Submit button WebBlocker categories Alcohol/Tobacco Drug Culture Search Engines Searching for blocked sites Click Check if the URL is on the CyberNOT List Configuring Virtual Private Networking Why create a virtual private network? What you will need IP Address Table example Enabling the VPN upgrade Step-by-step instructions for configuring a Soho VPN tunnelObtaining the VPN upgrade Special considerations How do I get a static external IP address? Frequently asked questionsWhy do I need a static external address? How do I connect three or four offices together? OK, why is ping not working?How do I obtain a VPN upgrade certificate? How do I troubleshoot the connection? View the VPN Statistics How do I enable a VPN Tunnel?Muvpn Clients View the VPN Statistics 104 General TroubleshootingHow do I reboot my SOHO? What do the on and Mode lights signify on the SOHO? How do I register my SOHO? Cant get a certain Soho feature to work with a DSL modem Set a password on my unit, but I forgot it. Can you help?What is a Soho feature key? How does the seat limitation on the Soho work? How do I install a Soho using a Macintosh? How can I see the MAC address of my SOHO? ConfigurationWhere are the Soho settings stored? How do I change to a Dhcp trusted IP address? How do I set up and disable Webblocker? How do I change to a static trusted IP address? WebBlocker Incoming VPN Management How do I set up my Soho for VPN Manager Access? How do I set up VPN between two SOHOs? Special Notices Online Documenting and In-Depth FAQsContacting Technical support Database WebBlocker Default gateway 98 DNS service 116 User Guide 117 Socks