User`s guide

19
Chapter 3
Configuration of the LAN in a filial office
For quick configuration of the filial’s LAN, it is possible to follow similar method as for the
headquarter’s network (see chapter 2). The only difference is in DNS and DHCP configuration.
Supposing that there is no domain server or any other DNS server in the filial’s network. The
Kerio Control’s DNS module will be used as the primary DNS server.
3.1 Configuration of network interfaces of the Internet gateway
Set a fixed IP address (e.g. 10.1.1.1) at the firewall’s interface connected to the local network.
Make sure that no default gateway is set on this interface! No DNS server should be set here
as well!
Follow the ISP’s instructions to set the interface connected to the Internet.
3.2 DNS configuration
In Configuration → DNS, keep the default settings (the DNS forwarder service and simple
DNS translation with the hosts file and a table of leased addresses are allowed) and set the
advanced options:
• Enter the local DNS domain name — filial.company.com.
• Enable the Use custom forwarding option The settings are addressed in details in
chapter 4.2.
• It is recommended to add a record about the server (or about other hosts to which
a fixed IP address will be assigned) to the hosts file:
10.1.1.1 server
3.3 DHCP Server Configuration
Go to the Configuration → DHCP server section to create an IP scope for hosts to which
addresses will be assigned dynamically (the Add → Scope option). The following parameters
must be specified to define address scopes:
• Address range — select 10.1.1.10 - 10.1.1.254 (addresses from 10.1.1.1 to
10.1.1.9 will be reserved for servers and printing machines),
• Network mask — 255.255.255.0