Installation Guide

Chapter 4. Network Configuration
For computers in an IP range that you want to give a network name, enter the last IP address in the range. The IP
address in Upper Limit must be at least as high as the one in Lower Limit. If you use a subgroup, leave this field
empty.
IP Address
The IP address of the object you entered in the DNS Name Or IP Address field is displayed here. This field is not
updated until you click on Look up all IP addresses again or make changes in the DNS Name Or IP Address
field.
Interface/VLAN
Here, you can select an interface or a VLAN to restrict the IP range.
If the interface ’-’ is chosen, the group will consist of all IP addresses in the interval between Lower limit and
Upper limit, regardless of what interface they are connected to. By selecting an interface or a VLAN, you constrain
the group to consist only of the IP addresses in the interval that really are connected to the selected interface/VLAN.
For example, if 10.20.0.0 - 10.20.0.255 are IP addresses behind the interface DMZ-1 and the lower and upper limits
are 10.10.10.20 and 255.255.255.255 respectively, choosing DMZ-1 as Interface will cause the group to consist of
the IP addresses 10.20.0.0 - 10.20.0.255, being the IP addresses in the interval actually connected to the selected
interface.
If you have selected a subgroup, the Interface/VLAN should be ’-’.
Delete Row
If you select this box, the row is deleted when you click on Add new rows, Save, or Look up all IP addresses
again.
Create
Enter the number of new groups and rows you want to add to the table, and then click on Create.
Save
Saves the Networks and Computers configuration to the preliminary configuration.
Cancel
Clears and resets all fields in new rows and reset changes in old rows.
Surroundings
Settings on the Surroundings page are only required when the Telecommuting Module has been made the DMZ
type.
The Telecommuting Module must know what the networks around it looks like. On this page, you list all networks
which the Telecommuting Module should serve and which are not reached through the default gateway of the
firewall.
All computers that can reach each other without having to go through the firewall connected to the Telecommuting
Module should be grouped in one network. When you are finished, there should be one line for each of your
firewall’s network connections (not counting the default gateway).
One effect of this is that traffic between two users on different networks, or between one of the listed networks and
a network not listed here, is NAT:ed.
Another effect is that for connections between two users on the same network, or on networks where neither is
listed in Surroundings, no ports for RTP sessions will be opened, since the Telecommuting Module assumes that
they are both on the same side of the firewall.
24