Interface Eth0, Eth1, ...
There is a tab for each network interface (Eth0, Eth1, ...) on the firewall. Select a tab to make configuration for that interface. There is also a tab where configuration for all interfaces can be viewed and changed.
Here, you set the interface name, whether the interface is on or off, the IP address, alias, and static routing.
For each interface, go to Directly connected networks and state the IP address of the firewall and the size of the network connected to this interface.
The figure below shows an example with two network interfaces. One of the interfaces is connected to the Internet via the provider's router, your default router, and the other is connected to the internal networks.
In the figure below, to access the two networks on the inside, the firewall must know that network 1 is accessible via router 1 (R1) and that network 2 is accessible via router 2 (R2).
You do not need to enter a route for the computers on any of the firewall's directly connected networks.
General
Physical device name
Physical device name tells the physical device name of the network interface.
Interface name
The network Interface name is only used internally in the firewall, e. g. when configuring Networks and Computers.
Obtain IP address dynamically
Specify if this network interface should obtain its IP address from a DHCP or PPPoE server instead of an address entered on this page. If DHCP client ON is selected, the firewall will send out a DHCP request when you apply the configuration and at boot. The request is sent out to the network connected to this interface. If no IP address is obtained, the firewall will keep on sending requests until an address lease is received.
The firewall will accept an IP address and a netmask via DHCP. It will also accept a default gateway, if the Default gateway field on the Basic Configuration page is set to "*". Other information from the DHCP server will be ignored.
If PPPoE client ON is selected, the firewall will send out a PPPoE request when you apply the configuration and at boot.
To obtain an IP address via PPPoE, you also need to enter configuration on the PPPoE page.
Status
Specify if this network interface is On or Off. If the interface is off, all configuration on this page is ignored, and the firewall will behave as if this interface wasn't present (except when used for failover).
If the interface should be used for failover, you should select Off. In this case, it won't be available for other traffic than the synchronizing within the failover team. Read more about failover in chapter 15, Failover.
Directly connected networks
The firewall must have an IP address on every network to which it is directly connected. This applies to all networks on the same physical network to which this interface is connected.
When the DHCP client is on, there must be a directly connected network with "*" as the DNS name/IP address, and where the Netmask/bits field is left empty. No other directly connected networks are allowed for this interface.
Name
A name for this IP address. You can use this name when configuring relays and VPN. This name is only used internally in the firewall.
DNS name or IP address
The name/IP address of the firewall on this network interface on this directly connected network. If a name is entered, you must enter the IP address for a name server on the Basic Configuration page.
IP address
Shows the IP address of the DNS name or IP address you entered in the previous field.
Netmask/bits
Enter the mask of the network where the DNS name or IP address applies.
Network address
The IP address of the network where the DNS name or IP address applies.
Broadcast address
Shows the broadcast address of the network in the Network address field.
Delete row
If you select this box, the row is deleted when you click on Add new rows, Save, or Look up all IP addresses again.
Add new rows
Enter the number of new rows you want to add to the table, and then click on Add new rows.
DHCP client status
When an interface is configured to obtain its IP via DHCP, the DHCP client status section is shown. Here you find information about the DHCP lease.
IP address
The IP address obtained via DHCP.
Netmask
The netmask for the network on which the IP address is.
Default gateway
Default gateway for the network on which the IP address is.
Lease obtained from
The DHCP server which served the IP address to the firewall.
Lease time
The time interval (in seconds) which the lease can be held.
Lease expires
The time when this lease expires. The firewall will renew the lease automatically.
PPPoE client status
When an interface is configured to obtain its IP via PPPoE, the PPPoE client status section is shown. Here you find information about the PPPoE address.
IP address
The IP address of the firewall obtained via PPPoE.
PPPoE server
The PPPoE server which leased the IP address.
Alias
Ingate Firewall can use extra IP addresses, aliases, on its interfaces. All alias IP addresses must belong to one of the Directly Connected Networks you have specified.
Aliases are necessary for setting up multiple relays on different IP addresses.
If the interface obtains its IP address dynamically, no aliases can be defined.
Name
Enter the name of your alias. You can use this name when configuring relays and VPN. This name is only used internally in the firewall.
DNS name or IP address
Enter the IP address of this alias, or a name in the DNS. If you enter a DNS name instead of an IP address, you must enter the IP address of a DNS server on the Basic Configuration page.
IP address
Shows the IP address of the DNS name or IP address you entered in the previous field.
Delete row
If you select this box, the row is deleted when you click on Add new rows, Save, or Look up all IP addresses again.
Add new rows
Enter the number of new rows you want to add to the table, and then click on Add new rows.
Static routing
If there is a router between the firewall and a computer network which the firewall is serving, you must name the router and the network here. The table is sorted by network number and network mask.
The firewall does not need a static route for networks behind its Default gateway, configured on the Basic Configuration page.
If the interface obtains its IP address dynamically, no static routes can be defined.
Routed network
Enter the DNS name or IP address of the routed network under DNS name or network address.
The IP address of the routed network is shown under Network address.
In the Netmask field, enter the netmask of the network.
Router
The name or IP address of the router that will be used for routing to the network. If there are several routers between the firewall and the network, fill in the router closest to the firewall.
Delete row
If you select this box, the row is deleted when you click on Add new rows, Save, or Look up all IP addresses again.
Add new rows
Enter the number of new rows you want to add to the table, and then click on Add new rows.
Save
Saves all Interface configuration to the preliminary configuration.
Undo
Clears and resets all fields in new rows and resets changes in old rows.
Look up all IP addresses again
Looks up the IP addresses for all DNS names on this page in the DNS servers you entered on the Basic Configuration page.