User guide

Configuring the Trusted Network
User Guide 53
Configuring the Trusted Network
You must configure your trusted network manually if you do not
use the Network Setup Wizard.
You can use static IP addresses or DHCP for the computers on your
trusted network. The Firebox® X Edge has a DHCP server to give IP
addresses to computers on your trusted and optional networks. You
can also change the IP address of the trusted network.
With a factory default Firebox, its DHCP server automatically gives
IP addresses to computers on the trusted network. The trusted net-
work starts with IP address 192.168.111.1. It is a “class C” network
with a subnet mask of 255.255.255.0. The Firebox can give an IP
address from 192.168.111.2 to 192.168.111.254. The factory default
configuration uses the same DNS server IP addresses and domain
name as it uses for the external interface. For more information, see
“IP Addresses” on page 5.
If necessary, you can disable the Firebox DHCP server. The Firebox
can also be a DHCP Relay Agent and send DHCP requests to a DHCP
server on a different network using a VPN tunnel. You can also use
static IP addresses for the computers on your trusted network.
Any changes to the trusted network configuration page require that
you click Submit and then restart the Firebox before the new con-
figuration starts. You can make many changes and then restart just
one time when you are done.
Changing the IP address of the trusted network
If necessary, you can change the trusted network address. For exam-
ple, if you connect two or more Firebox devices in a virtual private
network, each Firebox must use a different trusted network address.
If the two sides of the VPN use the same trusted network IP
addresses, one side must change the trusted network IP address
range so that it is different from the other side. For more informa-
tion, see “What You Need to Create a VPN” on page 130.
N OTE N OTE
If you change the IP address of the Edge’s trusted interface, you
must use the new IP address in your browser address bar to
connect to the Edge’s Web management interface.
For example, you change the Edge trusted interface IP address
from the default 192.168.111.1 to 10.0.0.1, then you click Submit.