Avaya 3.7, Configuration Manual

Page: 79 / 326

Using Device tabs to configure the security gateway
Issue 4 May 2005 79
Note:
Note:
When the security gateway is acting as a DHCP Relay, the security gateway
cannot be a DHCP server at the same time. DHCP Relay and DHCP Server
services are mutually exclusive.
When the DHCP Relay agent receives DHCP client requests from the private port, the DHCP
server(s) creates new DHCP messages and forwards the messages to the DHCP server(s) on
the public network. The DHCP server(s) on the public network sends DHCP offer messages
that contain the IP addresses to the DCHP Relay agent. The agent broadcasts the DHCP offer
messages to the DHCP clients.
!
Important:
Important:
The remote DHCP server(s) and the device’s private port IP addresses must be
part of the VPN in order for the DHCP Relay process to begin.
The Fallback to Local DHCP Server option allows the DHCP server to revert or fallback to the
Local DHCP Server if the DHCP Relay is not functioning.
Note:
Note:
In order for the security gateway to support the DHCP Relay Fallback feature,
Local DHCP Server must be configured. IP Devices are not supported in Fallback
mode.
None
Select None to configure the security gateway without the Local DHCP Server configuration or
the DHCP Relay configuration. None is the default configuration. If None is selected and the
VPNmanager is on the private side of the security gateway, then the IP address of the computer
running VPNmanager should be statically or dynamically configured through other DHCP
servers.
Device users tab
The Device>Device Users tab displays the device account user configuration and the VPN
authentication profile associated with the device account user. The device account user acts as
a proxy VPN user for all configured IP devices. You cannot delete the device account user.