Secure Computing SG570 Manuel d'utilisateur télécharger pdf (Page 80)

100

101

By default, machines on the DMZ network have addresses in a private IP address range,

such as 192.168.1.0 / 255.255.255.0 or 10.1.0.0 / 255.255.0.0. Real world addresses

may be used on the DMZ network by by unchecking Enable NAT from DMZ interfaces

to Internet interfaces under the Advanced tab. See the Network address translation

section later in this chapter for further information.

Configuring a DMZ connection

Select Direct Connection from the Configuration pull-down box of the network port to

be connected to the DMZ. Enter appropriate IP address settings and select DMZ from

Firewall Class pull-down menu.

Configuring a Direct Connection is described in detail in the section entitled Direct

Connection towards the beginning of this chapter.

Services on the DMZ network

Once you have configured the DMZ connection, configure the SnapGear unit to allow

access to services on the DMZ. There are two methods of allowing access.

If the servers on the DMZ have public IP addresses, you need to add packet filtering

rules to allow access to the services. See the section called Packet Filtering in the

chapter entitled Firewall.

Network Setup

1 2 ... 75 76 77 78 79 80 81 82 83 84 85 ... 340 341

Commentaires sur ces manuels

Pas de commentaire

Secure Computing SG570 Manuel d'utilisateur Page 80

Commentaires sur ces manuels