
The individual manual steps to configure these connection alternatives with the Web Interface
are discussed next.
A. Static - manual configuration
Manual configuration means that there will be a direct connection to the ISP and all the relevant
IP addresses for the connecting interface are fixed values provided by the ISP which are entered
into CorePlus manually.
Note: The interface DHCP option should be disabled
For static configuration of the Internet connection, the DHCP option must be disabled
(the default) in the properties of the interface that will connect to the ISP.
The initial step is to set up a number of IP address objects in the CorePlus
Address Book
. Let us
assume for this section that the physical interface used for Internet connection is
ge2
, the static
IP address for this interface is to be
10.5.4.35
, the ISP's gateway IP address is
10.5.4.1
, and the
network to which they both belong is
10.5.4.0/24
.
Note: Private IP addresses are used for example only
Each installation's IP addresses will be different from these IP addresses but they are
used here only to illustrate how setup is done. Also, these addresses are private IP
addresses and in reality an ISP would use public IP addresses instead.
Let's now add the gateway
IP4 Address
object which we will call
wan_gw
and assign it the IP
address
10.5.4.1
. The ISP's gateway is the first router hop towards the public Internet from the
Clavister Security Gateway. Go to System > Objects > Address Book in the Web Interface
navigation tree.
The current contents of the address book will be listed and will contain a number of predefined
objects created by CorePlus after it scans the interfaces for the first time. The screenshot below
shows the initial address book for the SG4500 Series.
Note: The all-nets address
The IP address object
all-nets
is a wildcard address that should never be changed and
can be used in many types of CorePlus rules to refer to any IP address or network range.
Chapter 3: CorePlus Configuration
39