Check Point L-71, Руководство администратора

Страница: 59 / 124

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 59
• A single DHCP or Static IP connection or multiple PPPoE connections can be established over
one untagged or one VLAN tagged WAN or DMZ interface.
•
When all the ADSL standards are turned off in the Advanced Settings and you can only connect
using the VDSL2 standard, the VPI, the VCI and the encapsulation options still appear even
though they are not used to open an internet connection.
Connection Monitoring tab
•
Automatically detect loss of connectivity to the default gateway
- Select this option to detect
connectivity loss by sending ARP requests (pinging) to the default gateway and expecting
responses.
• Monitor connection state by sending probe packets to one or more servers on the Internet
-
Select this option to detect connectivity loss by using more methods and servers.
• Connection probing method
- Select one of the options.

Ping addresses
- When you select this option, you can configure up to three servers by
IP address or host name.

Probe DNS servers - When you select this option, the appliance probes the DNS
servers as defined in the Internet connection and expects responses.
Advanced tab
For PPPoE
• IP Address Assignment
(PPPoE IPv4 only) - In
Local tunnel IP address
, select if the IP address
is obtained automatically or manually configured. If manually configured, enter the
IP address
.
• Service Provider Settings - In Service , enter a service name (optional) and select the
Authentication method .
• Connect on demand
- Select the
Connect on demand
checkbox if necessary. This is relevant
only when you are in high availability mode.
For PPTP and L2TP
• IP Address Assignment -
•
In
Local tunnel IP address
, select if the IP address is obtained automatically or manually
configured. If manually configured, enter the
IP address
.
•
In
WAN IP assignment
, select if the WAN IP address is obtained automatically or manually
configured. If manually configured, enter the
IP address
,
Subnet mask
, and
Default
gateway
.
• Service Provider Settings - In Service , enter a service name (optional) and select the
Authentication method .
• Connect on demand - Select the Connect on demand checkbox if necessary. This is relevant
only when you are in high availability mode.
Port Settings
• If necessary, select Use custom MTU value and set the MTU size .
Note
- For a DMZ interface the MTU value is applied to all LAN ports.
To avoid fragmentation (which slows transmission), set the MTU according to the smallest
MTU of all the network devices between your gateway and the packet destination.
For static and DHCP mode, set MTU to 1500 or lower.
For PPPoE connections, set MTU to 1492 or lower.