Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 104 / 861

104 Maintaining your security gateway
Making system changes with the System Setup Wizard
Making system changes with the System Setup Wizard
The System Setup Wizard provides you a quick way to set up your security gateway’s network
interfaces and system features.
The System Setup Wizard runs automatically the first time you log on to the appliance. This ensures
that you configure at least one inside and outside interface. You can run the System Setup Wizard after
initial set up to change system settings and add or change network interfaces. When you change
network interface configurations, the security gateway automatically reboots.
For descriptions of how to use the System Setup Wizard, see the following:
■
For information on using the System Setup Wizard for the first time, see the Symantec Gateway
Security 5000 Series v3.0 Installation Guide .
■
“Adding a network interface” on page 104
■
“Modifying a network interface” on page 108
■
“Modifying system information” on page 109
Adding a network interface
Network interfaces serve as connection points for traffic arrives at or leaves the security gateway.
You can add two types of interfaces to the security gateway:
■
Physical network interfaces
Depending on your model of appliance, you have access to from six to ten physical network
interfaces. When you perform the initial setup of the appliance, you only have to enable two
network interfaces, one as an inside interface, and one as an outside interface.
You can configure the additional network interfaces as you need them in your network.
■
Virtual local area network (VLAN) interfaces
VLANs let you create logical broadcast domains across one or more switches without adding
additional network interfaces. With VLANs, you can do all the routing between your subnets and
the Internet on one wire. The appliance’s physical network interface acts as an 802.1Q trunk port,
tagging packets with the correct VLAN ID.
The security gateway supports a total of 48 VLANs.
For instructions on adding interfaces, see the following:
■
Adding a physical network interface
■
Adding VLAN interfaces
After adding network interfaces, you can use them in the following ways:
■
In rules, as the point where traffic arrives at or leaves the security gateway
■
In clientless VPN profiles, as the location of the DHCP server
■
In host and subnet network entities, as the spoof protected interface
■
In security gateway network entities, to identify the security gateway
■
In redirected services, as the requested address
■
In address transforms, as the point where traffic arrives at or leaves the security gateway
Adding a physical network interface
To add a physical network interface, on the appliance, you connect the network cable to the interface.
You then run the System Setup Wizard to set up the network interface for use with the security
gateway.