Installation guide
Table Of Contents
- Introduction
- Headquarters configuration
- Selection of IP addresses for LAN
- Configuration of network interfaces of the Internet gateway
- Kerio Control installation
- Kerio Control Administration interface and product activation
- Setting connection and basic traffic rules
- DHCP Server Configuration
- DNS configuration
- Web interface and SSL-VPN certificates
- Mapping of user accounts and groups from the Active Directory
- Address Groups and Time Ranges
- Web Rules Definition
- FTP Policy Configuration
- Antivirus Scanning Configuration
- Intrusion Prevention System
- Enabling access to local services from the Internet
- Secured access of remote clients to LAN
- LAN Hosts Configuration
- Viewing statistics of Internet usage and user browsing behavior
- Configuration of the LAN in a filial office
- Interconnection of the headquarters and branch offices
- Used open source items
- Legal Notices
2.6 DHCP Server Configuration
11
Connectivity Wizard
First, run the Connectivity Wizard (the first link in the Configuration Assistant). Set the
following parameters using the Wizard:
• Internet connection types (the wizard, page 1) — select persistent connection with
a single Internet line.
• Internet interface (the wizard, page 2) — select an adapter connected to the Internet.
• Interface for the local network (the wizard, page 3) — select an adapter connected to
the local network.
Network Rules Wizard
Once connectivity is configured, run the Traffic Policy Wizard (the second link in the Configu-
ration Assistant). Set the following parameters using the Wizard:
• Access to Kerio Control services — enable all the services: Kerio VPN (for connection of
networks in the headquarters and other offices, and for connection of remote clients
— see chapter 4), Clientless SSL-VPN (remote access to shared folders and files in the
network via web browser) and Kerio Control Administration (remote administration of
Kerio Control).
• Mapping other services — add SMTP service mapping on the firewall.
In this step you can also define mapping for other hosted services such as an FTP
server. This will be better understood through the second method — custom rule
definition. For details, see chapter 2.15.
Note: There is no reason for allowing any services on firewalls of branch offices (branch office
servers use dynamic IP address).
2.6 DHCP Server Configuration
Go to the Configuration → DHCP server section in the Kerio Control Administration interface.
Connectivity wizard set the DHCP server in auto-config mode. Therefore it is not necessary to
define other information than desired reservations.
In the upper part of the window (Scopes) click on the local network scope and in the lower part
of the window (Leases and Reservations) add reservation for network printer. The address you
reserve need not necessarily belong to the scope described above, however, it must belong to
the specified network (in this example the 192.168.1.3 address is reserved). You need to
know the hardware (MAC) address of the printing machine to make the reservation.