User manual

- BaseWall VPN 6000 user manual -
Different types of Internet connections will require different values to be
entered in the next screen of the dialog. As a consequence, the next screen in
the dialog will look slightly different, based on the choice you make here.
If you have an Internet connection by means of an ISDN router or a cable or
DSL modem, you will generally be able to choose “DHCP-Client”. Choosing
“DHCP-Client” is the easiest possible configuration. Choosing DHCP-Client will
allow you to skip the next screen in the dialog entirely. You do not have to
enter any connection details as these can be automatically configured.
However, when you have a routed subnet or a fixed IP address for your Internet
connection and have been provided with an IP address, a net mask and a
standard gateway address by your Internet service provider (ISP), please
choose “Static/NAT” instead. Be sure to have the connection details provided
by your ISP at hand, because you will need these in the next screen.
Some Internet providers may have you authenticate before connecting to the
Internet, preferring to use PPTP or PPPoE. If you have such a connection,
choose “PPTP/PPPoE”. Like with a Static/NAT connection, setting up a
PPTP/PPPoE Internet connection will require connection details provided by your
ISP.
When in doubt about the type of Internet connection to choose, please contact
your ISP.
➔ Select the type of Internet connection appropriate to your situation.
In normal operation, your firewall will only use one Internet connection at a
time. Nevertheless, when this Internet connection fails, it may be necessary to
have a secondary connection to fall back on. Your BaseWall VPN 6000 supports
up to 4 different backup Internet connections. Whenever an Internet
connection fails, operation is taken over by the connection with the next lowest
“Failover level”. Your regular Internet connection has failover level “Normal”.
This is the lowest “Failover level”. If the connection with “Failover level”
“Normal” should fail, operation is taken over by any connection you have with
a “Failover level” of “Failover 1”. If this connection should fail, your Internet
connection is made using the connection with a “Failover level” of “Failover 2”
and so on.
➔ Select your new connection's “Failover level”
Your BaseWall VPN 6000 supports several means of determining whether a
connection is operational. All available means involve attempting to connect to
a certain host on the Internet. If a connection can be made then the associated
Internet connection is operational. If no connection to the host can be made,
then the associated Internet connection may be (temporarily) unavailable and
your firewall's Internet connection should be made using the connection with
the next lowest “Failover level”. Possible types of checking whether to switch
to a failover connection include “None” (no check, don't use any failover for
this connection), “Ping ICMP”, “Ping UDP”, “Traceroute ICMP” and “Traceroute
UDP”. Generally, all of these should yield the same results. Since some
firewalled hosts may limit the use of “Ping” or the ICMP protocol we
recommend you use “Traceroute UDP”.
Page 32 / 79