Chapter 9. Basic Configuration

Table of Contents
Basic Configuration
Access Control
RADIUS
SNMP
DHCP server
Dynamic DNS update
Auto Logon
Certificates

Under Basic Configuration, you configure:

You receive the IP address for your gateway on the outer network from your network supplier.

This configuration is usually not changed very often.

Basic Configuration

On the Basic Configuration page, general settings for the firewall are made. The most important ones for getting started are the default gateway and, for SIP, the DNS server.

General

Name of this firewall

Here, you can give your Ingate Firewall a name. The name of the firewall is displayed in the title bar of your web browser. This can be a good idea if you administer several firewalls. The name is also used if you use SNMP and when you export log files into the WELF format.

Default gateway

The Default gateway is the IP address of the router that is used to contact the outside world. This IP address is usually assigned by your network provider. Default gateway must be an IP address in a directly connected network of one of the firewall's interfaces. See appendix H, Definitions of terms, for further description of routers/gateways.

If the SIP module is active, you must enter a Default gateway. If an interface will receive its IP address from a DHCP server, the firewall will get its default gateway from the server, and Default gateway must be set to "*" if the SIP module is active.

IP policy

Here, you specify what will happen to IP packets that do not match any of the defined firewall rules (defined on the Rules page). This applies to all traffic in all directions between the different networks. Discard IP packets means that the firewall ignores the IP packets without replying that the packet did not arrive. Reject IP packets makes the firewall reply with an ICMP packet telling that the packet did not arrive.

Policy for reply to ping to the firewall

Here, you specify how the firewall should reply to ping packets to its IP addresses. You can choose between Never reply to ping, Only reply to ping from the same interface and Reply to ping to all IP addresses. Only reply to ping from the same interface means that the ping request should originate from a network which is directly-connected to the pinged interface of the firewall or from a network to which there exists a static route from the pinged interface, or the request will be ignored.

Ping is a way of finding out whether a computer is working. See appendix H, Definitions of terms, for further information on ping.

Default domain

Here, you can enter a default domain for all settings. If a default domain is entered, the firewall will automatically assume that an incomplete computer name should be completed with the default. If, for example, Default domain contains company.com, you could as the name of the computer axel.company.com use only axel. If no default domain should be used, the Default domain field should contain a single dot (.).

Report new versions of Ingate Firewall

You can choose to turn the firewall's version control On or Off. You must enter a Default gateway to enable the version control. If a new version exists, the text "A new Ingate Firewall version exists. Check here for upgrades." will appear at the top of each configuration web page.

Date of last successful version control

Ingate Firewall checks for new versions every 24 hours and at reboot. Here, you can see when the last check was made.

DNS servers

Here, you configure DNS servers for the firewall. The servers are used in the order they appear in this table, which means that the firewall uses the top server to resolve DNS records until it doesn't reply. Only then is server number two contacted.

No.

The DNS servers are used in the order they are presented in the table. To move a server to a certain row, enter the number on the row to which you want to move it. You need only renumber servers that you want to move; other servers are renumbered automatically. When you click on Save, the DNS servers are re-sorted.

DNS name or IP address

The DNS name/IP address of the DNS server which the firewall should use. Note that to use DNS names here, there must exist a DNS server in the firewall's permanent configuration.

IP address

Shows the IP address of the DNS name or IP address you entered in the previous field.

Delete row

If you select this box, the row is deleted when you click on Add new rows, Save, or Look up all IP addresses again.

Add new rows

Enter the number of new rows you want to add to the table, and then click on Add new rows.

Save

Saves the Basic Configuration configuration to the preliminary configuration.

Undo

Reverts all the above fields to their previous configuration.

Look up all IP addresses again

Looks up the IP addresses for all DNS names on this page in the DNS servers you entered above.