Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 66
•
Status - Shows a status for physical interfaces and wireless networks:
Physical interfaces - Shows cable connection status of each physical interface that is
enabled. Otherwise, it shows disabled.
Wireless networks - Shows if the wireless network is up or disabled.
To create/edit a switch:
Note
- Between the LAN ports of a switch, traffic is not monitored or inspected. MAC filtering is
disabled.
Configure the fields in the tabs:
Configuration tab
1.
In
Switch Configuration
, select or clear the interfaces you want to be part of the switch. The
table shows you which interfaces are already part of the switch (shown with checkmarks in the
table) and which interfaces are not assigned yet and can be added to the switch (empty
checkboxes in the table). For example, if LAN8 is already part of another switch, it does not
show in this table.
2.
From
Assigned to
, select an option:
•
Unassigned
- The switch is not part of any network and cannot be used
•
Separate network -
When you select a separate network, configure the settings for the
switch
•
Monitor Mode
- See below
3.
Choose the
IP address
and
Subnet mask
the switch uses.
4.
Use Hotspot
- Select this checkbox to redirect users to the Hotspot portal before allowing
access from this interface. Hotspot configuration is defined in the
Device
>
Hotspot
page.
5.
In
DHCP Server
:
Select one of the options:
•
Enabled
- Enter the
IP address range
and if necessary the
IP address exclude range
. The
appliance's own IP address is automatically excluded from this range. You can also exclude or
reserve specified IP addresses if you define network objects in the
Users & Objects
>
Network
Objects
page. To reserve specified IP addresses, you must have the device MAC address.
•
Relay
- Enter the DHCP server IP address.
•
Disabled
IPv6 Auto Assignment for IPv6 configurations:
•
SLAAC (Stateless Address Autoconfiguration)
- The host selects its own full IPv6 address
after it receives the IPv6 address prefix from the gateway. The appliance cannot reserve an
IPv6 address for a specific host (Mac Address).
Note
- The common use case is a prefix length of 64. If you change it from 64, make sure the
internal hosts support the new length.
•
DHCPv6 Server
- Same as the DHCPv4. You can reserve an IP address for a specified host.
•
DHCPv6 Server Relay
- Same as in IPv4.
•
Disabled (Static)
Summary of Contents for L-71
Page 122: ......
