====== Network Configuration ====== The Network Configurations allow you to configure how the Internet Gate should be connected to its ambient networks. The Network Configuration page has two parts: the upper half controls your WAN (Internet) connection; the lower half controls your LAN (local PCs) connection(s). [[wp>Wide_area_network|WAN]] [[wp>LAN]] The default settings will work for users connecting to the Internet through an Internet Service Provider that distributes network settings automatically using DHCP. [[wp>DHCP]] Advanced configurations (multiple IP addresses, multiple WAN interfaces, etc) are on a separate [[Advanced Network Configuration]] page, opened by a link at the bottom of the page. You can read about some special configuration scenarios [[network:start|here]]. {{ :web_gui:network_page.png?267|Network page in rel 5.30}} Some of the settings are adjusted depending on what Operator you have choosen. ===== Upper half - WAN (Internet) connection ===== ==== Operational mode ==== The Internet Gate is by default a router. It can however operate in other modes too. Read more about it on the [[:network:operational modes]] page. ==== Interface ==== On units with multiple possible WAN interfaces (both ADSL and Ethernet) you can select which interface to use for WAN connection using the dropdown box. ==== Access type ==== By default DHCP is used to get WAN IP address and other settings automatically. [[wp>DHCP]] The fields "IP Address", "Subnet Mask", "DNS Server" and "Default Gateway" will then be filled in automatically. It is normally not necessary to click the "Renew" or "Release" button, DHCP will do the refreshing of the IP address periodically. However, when troubleshooting, one can use these buttons to force an IP acquisition instantly.\\ :!: If "Renew" gives no success, try also to //first// press the "Release" button and //then// the "Renew" button. "Renew" only tries to renew (reuse) the //same// IP address. If the DHCP server doesn't want to give away that particular IP address (for some reason) the Internet Gate DHCP client must be told to forget about that one (="Release") and ask for another IP address. Some Internet Suppliers use other protocols than DHCP: * //PPPoE// - As above, but the PPPoE protocol is used (PPP server supplies the IP address). [[wp>PPPoE]] * //PPPoA// - As above, but the PPPoA protocol is used (PPP server supplies the IP address). [[wp>PPPoA]] * //Manual// - The fields "IP address", "Subnet mask", "DNS server" and "Default Gateway" should be manually entered according to specifications from your Internet Supplier. * //Auto// - Automatic search. Click "Search" to detect which of above connection types that you should use. A failed search means that no server is answering (possibly, you should then use the "Manual" option) or that the Internet connection is broken. Some of these protocols require additional fields appearing below the **Access type** selection (user name, password) to be entered. Your Internet Supplier should have supplied you with those account values. ==== VPI / VCI ==== If ADSL is used there will also be fields for **VPI** and **VCI**. [[wp>Virtual_Path_Identifier|VPI]] [[wp>Virtual_Circuit_Identifier|VCI]] \\ Ask your Internet Supplier what to enter into those fields.\\ :!: If in doubt, one can try the **Access type** //Auto//, and click "Search". If successful, the **VPI** and **VCI** fields will be filled in automatically and correctly. ==== MAC address ==== The Internet Gate can use a different MAC address than the unique one given to it in the factory. (MAC address cloning) [[wp>MAC_address|MAC address]] :!: Entering a MAC address that is already in use on the network causes problems! ==== Dynamic DNS ==== A dynamic DNS service is used to allow remote users access your server by name instead of IP number. It is especially useful if you do not have a static global IP address. The dynamic DNS server will automatically be notified of your new IP address when it changes. Read more about [[dynamic DNS]]. ==== DNS Server ==== Enter the IP address of one or two DNS servers that shall be used for DNS name resolution (to easily locate Internet sites by merely writing their name). [[wp>Domain_Name_System|DNS]] If you use DHCP, PPPoE or PPPoA access types then these fields will be filled in automatically. If not, or you prefer to use some other DNS servers, then disable Obtain automatically and enter the values manually. ==== Default gateway ==== A Gateway is used to access the Internet. Enter its IP address, if your Internet Supplier has told you one. [[wp>Default_gateway|Default gateway]] :!: The IP address of the Gateway must be on the same subnet as your WAN interface! At DHCP, PPPoE or PPPoA this data will normally be automatically collected. ===== Lower half - LAN (local PCs) connections ===== The Internet Gate can have multiple subnets behind it, allowing you to separate and protect data traffic between them. The arrows in the back panel picture indicate which interfaces have which subnet. ==== Interface usage ==== A dropdown box selects how the interface will be used by the firewall/router/bridge: * //inside// - Connected computers will be protected by the firewall on a separate subnet (normal, recommended setting for most users). * //outside// - Unprotected. Inside interfaces will be protected from this interface by the firewall. (Only for the advanced user!) * //[[:network:DMZ]]// - DeMilitarized Zone - Special subnet for webservers: can access WAN, but no connection at all to LAN. [[wp>DMZ_(computing)|DMZ]] * //blocked// - Connector not used and is switched off. * //isolated// - Can only access WAN, but no connection at all to other LAN interfaces. (Same as DMZ.) * //off// - Virtual access point is not used and is switched off. (AIR can not be switched off here - disable entire wireless on Wireless Settings page instead.) * //%%-->%% ET1// - Bridged to ET1. Uses same subnet as ET1 port, see ET1 port settings for details. * //%%-->%% ipwanx// - Bridged to an extra WAN interface. Open the extra WAN interfaces page to see/edit this port's settings. As the [[:wireless:start|wireless]] interfaces are turned off by default you are recommended to enable them on the [[web GUI:Wireless page]] before you configure them on this page. ==== IP address ==== **IP Adress** The unit's IP address on LAN. The unit can be reached by this address from your PC. **Subnet Mask** States which of the IP address' digits that identify the subnet of your LAN.\\ :?: The more advanced user may want to enter subnet mask as a prefix length, where 255.255.255.0 is entered simply as the value "24" (the mask has 24 binary one:s). This can be done here, as on many web pages in the Internet Gate where a subnet mask is requested. However, the mask will be converted and stored in its dot notation form, and showed in this style the next time the web page is displayed. [[wp>IPv4_subnetting_reference|IP subnetting, CIDR]] ==== DHCP Server ==== This should be checked if you want the unit to act as a DHCP server on your LAN. (Recommended and default)\\ (A DHCP server supplies IP addresses to all PC's on a LAN. [[wp>DHCP]])\\ :!: It doesn't work to have more than one DHCP server on the LAN, make sure that other DHCP servers (in another Internet Gate, router or PC) are shut off. If a DHCP server elsewhere on the LAN is preferred, this checkbox should be unchecked. **From**, **To** The address range used by the DHCP server to select IP addresses to distribute.\\ :!: The address range must lie within the subnet specified by the **IP Address** and **Subnet Mask** for this interface. [[wp>IPv4_subnetting_reference|IP subnetting]] ===== Advanced settings ===== [[network:start|Special scenarios]] [[Advanced Network Configuration]] [[DNS server]] [[DHCP Server]]