3Com 3C16111 - SuperStack 3 Firewall Web Site Filter, Руководство пользователя

Страница: 116 / 214

116 C
HAPTER
8: A
DVANCED
S
ETTINGS
Figure 52 Intranet Window
To enable intranet firewalling, it is necessary to identify which machines
are protected against unauthorized access by specifying the IP addresses
of these machines. You can do this in two ways:
■
Inclusively by specifying which machines are members of the segment
with restricted access.
■
Exclusively by specifying which machines are not members of the
segment with the restricted access.
Using the inclusive method, you specify the IP addresses of the machines
which are connected to the Firewall’s LAN port. Use this method in cases
such as a small accounting office in a large LAN, where it may be easier to
identify the small number of machines with restricted access rather than
the larger number of machines on the corporate network.
Using the exclusive method, you specify the IP addresses of the machines
connected to the Firewall’s WAN port. Use this method in cases such as a
large school district with a small student computer lab where it would be
easier to specify the small number of machines on the WAN which are
not protected by the intranet firewall, rather than the larger number of
machines which are.
Typically, it is easier to enter the IP addresses from the smaller number of
machines. Enter these addresses individually, or as a range.
IP addresses for Workstations on the LAN port must have static IP
addresses or use the Internet Firewall as a DHCP server. It is not possible
for them to use a DHCP server connected to the WAN port.
DUA1611-0AAA02.book Page 116 Thursday, August 2, 2001 4:01 PM