Nokia IP40 - Satellite Unlimited - Security Appliance, User Manual

Page: 86 / 244

6
Managing Your Local Area Network
86 Nokia IP40 Security Platform User’s Guide v1.1
Configuring a DMZ Network
In addition to the LAN network, Nokia IP40 Security Platform allows you to define a second
internal network called a demilitarized zone (DMZ). By default, all traffic is allowed from the
LAN network to the DMZ network, and no traffic is allowed from the DMZ network to the LAN
network. You can customize this behavior by creating firewall user rules.
For example, you can assign your company accounting department to the LAN network and the
rest of the company to the DMZ network. The accounting department would be able to connect
to all company computers, while the rest of the employees cannot access any sensitive
information on the accounting department computers. You can then create firewall rules that
allow specific DMZ computers (such as a manager’s computer) to connect to the LAN network
and the accounting department.
Note
DHCP server is supported on a DMZ network.
To configure a DMZ network
DMZ configuration is not available for Tele 8 License.
1.
Connect the DMZ computer to the DMZ port. If you have more than one computer in the
DMZ network, connect a hub or switch to the DMZ port, and connect the DMZ computers
to the hub.
2.
Click Network in the main menu, and click My Network tab.
The My Network page appears.
3.
Go to the DMZ Network Settings area.
4.
If desired, enable or disable Hide NAT.
5. In the IP40 DMZ IP text box, enter the IP address of the DMZ network default gateway.
Note
The DMZ network must not overlap the LAN network.
6.
In the DMZ Subnet Mask text box, type the DMZ internal network range
7.
To reset the network to its default settings, do the following:
a.
Click Default.
A confirmation message appears.
b.
Click OK.
The default settings are restored.
c.
Click Apply.
A warning message appears.