137
Q :
Can Admin modify the internal and external interface IP addresses
anytime?
A :
No, because the names in the address table are set according to the IP
addresses of internal and external interface cards, and the source
address and destination address of policies are set according to address
table. The IP addresses of the DFL-80’s internal interface and external
interface are foundations of administration policies. If the administrator
wants to change the DFL-80’s IP address, the admin will need to clean
up all the administration policies and address table.
Q :
Are there any rules to follow when setting up administration policies?
A :
When setting up policies, administrators need to follow [small to big]
principle. This means that when the source address, destination address
and service items of a policy is the subset of another policy, it is
necessary to set policy of the subset first. For example, the sequence
to set policies for individual worker, department, and every worker in the
company is:
Individual
>
>
>
>
>
Department
>
>
>
>
>
Every worker
If subset policies are defined after the main policies, policies defined by
the subset became invalid. For example, the new policy is:
Every worker
>
>
>
>
>
Department
>
>
>
>
>
Individual
The policies of departments and individuals are subsets of policies of
every worker, so policies defined by the latter two are invalid.
