133
Establishing your network
Allowing DHCP traffic
To configure the DHCP relay proxy
1
After establishing a Telnet, SSH or HyperTerminal connection to the security gateway, from the
command-line, navigate to /var/lib/sg, and then edit the dhcprelay.conf file.
The following is an example of the default file:
# Example configurations:
#
# A standard example that enables DHCP and specifies 10.3.3.2 as # the DHCP server.
#
#ENABLE_DHCPRELAY=yes
#DHCPSERVER="10.3.3.2"
#
# To define multiple DHCP servers add them to the DHCPSERVER
# field as follows:
#
#ENABLE_DHCPRELAY=yes
#DHCPSERVER="10.3.3.2 10.4.4.25 10.5.5.1"
ENABLE_DHCPRELAY=no
DHCPSERVER="127.0.0.1"
2
To enable the DHCP server, change the uncommented (last) ENABLE_DHCPRELAY from no to yes.
For example:
ENABLE_DHCPRELAY=yes
3
Do one of the following:
■
To enable a single DHCP server, next to DHCPSERVER= type the IP address of the target
DHCP server.
For example:
DHCPSERVER="10.3.3.2"
■
To enable multiple DHCP servers, next to DHCPSERVER= type the IP addresses of the target
DHCP servers.
For example:
DHCPSERVER="10.3.3.2 10.4.4.25 10.5.5.1"
Use a space between each server.
4
Do one of the following:
■
If the DHCP relay proxy is currently stopped, start or re initialize the DHCP relay proxy by
running:
/etc/init.d/sgsdhcprelay start
■
If the DHCP relay proxy is currently running, restart or re initialize the DHCP relay proxy by
running:
/etc/init.d/sgsdhcprelay restart
To open a port to allow DHCP traffic
1
In the SGMI, in the left pane, under System, click
Administration
.
2
In the Administration window, on the Advanced Options tab, click
New
.
3
In the Advanced Option Properties dialog box, on the General tab, in the Option Name text box,
type
portcontrol.enable_udp_ports
.
4
In the Caption text box, type a brief description of the advanced option.
5
On the Value tab, in the Value text box, type 67, and then click
Add
.
Enter only one value for each option.
6
Optionally, on the Description tab, type a more detailed description than you typed in the Caption
text box.
7
Click
OK
.
Summary of Contents for Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series
Page 76: ...76 Managing administrative access Enabling SSH for command line access to the appliance...
Page 242: ...242 Defining your security environment Controlling full application inspection of traffic...
Page 243: ...243 Defining your security environment Controlling full application inspection of traffic...
Page 269: ...268 Limiting user access Authenticating using Out Of Band Authentication OOBA...
Page 373: ...372 Preventing attacks Enabling protection for logical network interfaces...
Page 509: ...508 Generating reports Upgrade reports...
Page 553: ...552 Advanced system settings Configuring advanced options...
Page 557: ...556 SSL server certificate management Installing a signed certificate...
Page 861: ...860 Index...