Network Configuration

The Network Configurations allow you to configure all IP settings, such as IP addresses, etc. for all interfaces (LAN, WAN, etc.)

NOTE! Press "Save" after your settings!


Internet interface
This interface is pre-configured to be used as the WAN interface, usually connected to the Internet.

The WAN interface can be selected to be used as:
outside - Normal setting, where the other interfaces are on the inside and will be protected from this interface by the NAT and firewall functions.
blocked - The interface is not used and is switched off.
bridged with ... - The interface will be connected to the same subnet as the other specified interface and there will be no firewall or NAT function between the interfaces.
LAN SIParator - The unit will be reconfigured to a special SIP signaling and media proxy that will allow SIP traffic to and from the LAN to traverse an existing (non SIP capable) firewall protecting the LAN. This selection requires the SIP Switch option. All other SIP functionality will also be available.
Note that in LAN SIParator mode, this unit's WAN interface shall be connected to the LAN (inside the existing firewall)! Only the WAN Ethernet port shall be used.
In LAN SIParator mode the following configuration has to be made:
- The outside IP address of the existing firewall (i.e. the public IP address from the ISP) has to be filled in.
- The UDP port range 35000 - 36999 is recommended for the SIP media streams.
- The same port range must be opened in the existing firewall and redirected to this unit.
- The SIP UDP and TCP ports 5060 must also be redirected to this unit in the existing firewall.
- All SIP clients on the LAN must be setup to use the IP address of this unit as their outbound SIP proxy.

IP Address - The unit's IP address on the WAN. The unit can be reached by this address from the Internet.
Subnet Mask - States which of the IP address's digits that identify the subnet you are on.
Get by DHCP - Get settings automatically from your Internet Supplier's DHCP server.
The fields "IP address", "Subnet mask", "DNS server" and "Standard Gateway" will be filled in automatically the next time the unit is powered on.
If you have received your own static IP address from your Internet Supplier, then enter it into the fields "IP address" and "Subnet mask".
Otherwise check the "Get by DHCP" checkbox.
Locked (Advanced) - Prevents DHCP and PPP clients to change manually entered IP Address and Subnet Mask.
WAN mask (Advanced) - Use if you have been assigned a subnet by your Internet Supplier. Almost only used for PPP connections. NB! This setting affects certain firewall rules to accept the wider range of IP addresses, so use with care!
IP aliases (Advanced) - Comma separated list of IP addresses. Use if you have been assigned more than one IP address by your Internet Supplier. Almost only used for Ethernet based connections.

NOTE! Press "Save" after your settings!


DNS Server (Internet)
Enter the IP address of one or more DNS servers that shall be used for DNS name resolution (to easily locate Internet sites by merely writing their name).

IP Address - IP address(es) of the DNS server(s), if your Internet Supplier have told you any.
Domain - Enter the name of the domain you are on, if your Internet Supplier have told you any.
Default Gateway - A Gateway is used to access the Internet. Enter their IP address(es), if your Internet Supplier have told you any.
NOTE! The IP address of the Gateway must be on the same subnet as your WAN interface!
Locked (Advanced) - Prevents DHCP and PPP clients to change manually entered DNS Server resp. Default Gateway settings.

If "Get by DHCP" is checked, all this data is filled in automatically - you do not need to do anything.

NOTE! Press "Save" after your settings!



Local interface (ET1, ET2, etc, or AIR)
The connector that your PC or LAN will be connected to. The settings in this box affect how the unit behaves on your LAN.

used as - Select how the contact will be used:
inside - Connected computers will be protected by the firewall (normal, recommended setting for most users).
outside - Unprotected. Inside interfaces will be protected from this interface by the firewall. (Only for the advanced user!)
DMZ - DeMilitarized Zone - Special subnet for webservers: unprotected from WAN, but no connection at all to LAN.
blocked - Connector not used and is switched off.
disabled - (only for AIR) Wireless transmitter is switched off. NB! The unit will be rebooted when selecting/unselecting this option!

IP Address - The unit's IP address on LAN. The unit can be reached by this address from your PC.
Subnet Mask - States which of the IP address's digits that identify the subnet you are on.
DHCP Server - Check, if you want the unit to act as a DHCP server on your LAN. (Recommended)
(A DHCP server supplies IP addresses to all PC's on a LAN)
From, To - The address range used by the DHCP server to select IP address to distribute.

NOTE! None of the interfaces are allowed to be on the same subnet as any other interface!
DHCP "From" and "To" must be on the same subnet as the IP address!

NOTE! Press "Save" after your settings!


Hostname (Advanced)
The name of this unit.
Check the checkbox if the hostname is to be submitted when getting IP address from the DHCP server (rarely used).


PPP TCP MSS clamping (Advanced)
The maximum TCP MSS value allowed for PPP-based connections. Is normally set to MTU - 40.


Add/delete routes (Advanced)
Use this, for example, to make a routed subnet reachable through the unit. "Delete" only used to remove unwanted automatically configured routes. Changes are reflected on the page "Network Status"


Add DHCP server options (Advanced)
Use this if the DHCP server should send any additional options to the clients (the IP address, default gateway, broadcast address, DNS and domain name are always sent).
Option - Number according to RFC2132.
Data - A string, or one or several decimal values.
Format - Format of the data. Use "IP address" for a single, dot notated address, use "Array" for multiple IP addresses. The "Array" is a comma-separated list of decimal values, one value for each byte.


Read more online:
Network Configuration