Configure ISDN interfaces
Digi TransPort User Guide
229
Attempt to assign the following IP configuration to remote devices
Set this parameter if the remote system needs a supplied address. The interface makes an
attempt to negotiate an IP address from the IP address pool. Generally, this parameter is
enabled for incoming connections. This checkbox opens to show the following parameters.
Assign remote IP addresses from a.b.c.d to a.b.c.d
The range of IP addresses supplied to incoming callers. This parameter may require alteration
if the default value
10.10.10.0
to
10.10.10.4
does not suit the remote network configuration.
Mask:
The IP netmask for the Remote network. This can be used to create a dynamic route to the
remote network whenever the ISDN interface is active.
Primary DNS server:
The answering ISDN interface would normally supply its own PPP IP address to the peer for
DNS requests. This parameter allows you to specify an alternative DNS IP address.
Secondary DNS server:
A secondary DNS server IP address to the peer for DNS requests, if required.
Enable NAT on this interface
Enables or disables IP Network Address Translation (NAT) on the answering ISDN interface.
This checkbox opens to show the following options:
IP Address
Enable standard Network Address Translation (NAT).
IP address and Port
Enable Network Address and Port Translation (NAPT).
Enable IPsec on this interface
Enables or disables IPSec processing on the ISDN interface. If enabled, packets sent or
received on this interface must pass through the IPSec code before being transmitted. IPSec
may drop the packet, pass it unchanged, or encrypt and encapsulate within an IPSec packet.
This checkbox opens to show the following parameters:
Keep Security Associations (SAs) when this ISDN interface is disconnected
Configures the router to keep any existing IKE and IPsec associations should the link drop. This
is usually applied on head-end routers with fixed IP addresses.
Use interface X, Y for the source IP address of IPsec packets
By default, the source IP address for an IPSec Eroute is the IP address of the interface on
which IPSec was enabled. By setting this parameter to either a PPP or Ethernet interface, the
source IP address used by IPSec will match that of the Ethernet or PPP interface specified.
Enable the firewall on this interface
Enables or disables the Firewall script processing for the mobile interface.
Note
If the firewall is enabled on an interface and with the absence of any firewall rules, the
default action is to block ALL traffic. To configure the firewall, refer to the
Firewall
configuration
on page 651 section.
