entries defined in cOS Core rule sets.
There also has to be an associated route with the PPTP tunnel to allow traffic to flow through it,
and this is automatically created in the
main
routing table when the tunnel is defined. The
destination network for this route is the
Remote Network
specified for the tunnel. For the public
Internet this should be
all-nets
.
If we go to
Network > Routing > Routing Tables > main
we can see this route.
If the PPTP tunnel object is deleted, this route is also automatically deleted.
At this point, no traffic can flow through the tunnel since there is no IP rule set entry defined that
allows it. As was done in option
A
above, we must define a rule set entry that will allow traffic
from a designated source network and source interface (in this example, the network
G1_net
and
interface
G1
) to flow to the destination network
all-nets
and the destination interface, which is
the PPTP tunnel.
DHCP Server Setup
If a NetWall 6000 Series interface is to have a DHCP server enabled on it, first create an
IP4 Address
object which defines the address range to be handed out. Here, it is assumed that this has the
name
dhcp_range
. It is also assumed that another
IP4 Address
object
dhcp_netmask
has been
created which specifies the netmask.
We now create a DHCP server object called
my_dhcp_server
which will only be available on the
G1
interface. To do this, go to
Network > Network Services > DHCP Servers
and select
Add >
DHCP Server
. The server properties can now be specified.
An example IP pool range might be
192.168.1.10 - 192.168.1.20
with a netmask of
255.255.0.0
.
In addition, it is important to specify the
Default gateway
for the server. This will be handed out
to DHCP clients on the internal networks so that they know where to find the public Internet. The
default gateway is always the IPv4 address of the interface on which the DHCP server is
configured. In this case,
G1_ip
.
To set the default gateway, select the
Options
tab.
Chapter 4: cOS Core Configuration
59