HP SuperStack Firewall Series Uživatelský manuál stáhnout pdf (Strana 116)

116 C

HAPTER

8: A

DVANCED

ETTINGS

Figure 52 Intranet Window

To enable intranet firewalling, it is necessary to identify which machines

are protected against unauthorized access by specifying the IP addresses

of these machines. You can do this in two ways:

■

Inclusively by specifying which machines are members of the segment

with restricted access.

■

Exclusively by specifying which machines are not members of the

segment with the restricted access.

Using the inclusive method, you specify the IP addresses of the machines

which are connected to the Firewall’s LAN port. Use this method in cases

such as a small accounting office in a large LAN, where it may be easier to

identify the small number of machines with restricted access rather than

the larger number of machines on the corporate network.

Using the exclusive method, you specify the IP addresses of the machines

connected to the Firewall’s WAN port. Use this method in cases such as a

large school district with a small student computer lab where it would be

easier to specify the small number of machines on the WAN which are

not protected by the intranet firewall, rather than the larger number of

machines which are.

Typically, it is easier to enter the IP addresses from the smaller number of

machines. Enter these addresses individually, or as a range.

IP addresses for Workstations on the LAN port must have static IP

addresses or use the Internet Firewall as a DHCP server. It is not possible

for them to use a DHCP server connected to the WAN port.

DUA1611-0AAA02.book Page 116 Thursday, August 2, 2001 4:01 PM

1 2 ... 111 112 113 114 115 116 117 118 119 120 121 ... 213 214

Žádné komentáře

HP SuperStack Firewall Series Uživatelský manuál Strana 116