Silicon Graphics Gauntlet, Administrator'S Manual, Page: 152 / 306

126
Chapter 17: The Graphical Management Interface
The Gauntlet networks and interfaces configuration form allows you to specify trusted
and untrusted networks. Until you make changes on this form, all networks are
considered untrusted, and only the Gauntlet system itself is trusted.
You can use a terminating asterisk as a wild card to represent “all” in network addresses.
These examples illustrate the use of the asterisk:
• 192.168.128.*—all IP addresses beginning with “192.168.128”
• 192.168.*—all IP addresses beginning with “192.168”
• *—all IP addresses
Note: Only a terminating asterisk is allowed: an entry such as 192.*.128.* is not valid.
The default subnet mask automatically provided by the GUI for trusted and untrusted
networks is 0xFFFFFF00, which is the correct mask for a non-subnetted Class C network.
If this mask is not correct for your configuration, click Edit and modify the mask field to
change it.
Trusted Networks
The Gauntlet firewall supports the concept of “trusted networks,” networks whose users
are permitted to access firewall services without user authentication (see “Authorizing
Users Form” on page 163). Typically, trusted networks are your internal, local networks.
To add networks to the trusted list, click the ADD button; then specify the IP address of
each network that you want to add to the trusted list.
Trusted Interfaces
Specifying trusted interfaces (interfaces where trusted networks are connected) allows
the firewall to guard against IP address spoofing, a ruse in which network packets are
tagged with a falsified trusted network address. When you designate trusted interfaces,
Gauntlet verifies that packets tagged with a trusted network address actually arrived on
a trusted interface.
Note:
Specifying trusted interfaces is required if you have any trusted networks.