Check Point L-71, Руководство администратора

Страница: 65 / 124

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 65
The page also lets you:
• Configure multiple switches (port based VLANs) between the available local LAN interfaces
and wireless networks. Between the LAN ports of a switch, traffic is not monitored or
inspected.
Note - MAC filtering is disabled on switch networks. To enforce MAC filtering on a
network with several ports, use bridge.
• Configure multiple
bridges
between interfaces. Traffic in a bridge is always monitored and
inspected by the appliance.
•
Create and configure tag based
VLANs
(802.1q) on any of the LAN interfaces or DMZ.
• Create and configure
VPN tunnels (VTI)
which can be used to create routing rules which
determine which traffic is routed through the tunnel and therefore also encrypted (Route
based VPN).
• On wireless devices - Add new wireless networks ( Virtual Access Points ). This can also be
done through the
Device
>
Wireless
page.
There are two radio transmitters: 2.4 GHz and 5 GHz. Each network is configured separately
under a specified transmitter.
You can also use unassigned LAN ports to create an internet connection. In the table, these ports
have the status
Assigned to Internet .
Notes:
• LAN ports assigned to internet connections can only be disabled from the Internet page.
• You cannot edit a LAN port assigned to an internet connection. When you click Edit , the window
opens, but when you click
Apply
, a warning shows that this deletes the connection.
• When you create a bridge or switch surface, these LAN ports do not appear in the selection box
as optional ports.
To create any of the above options:
Click New and choose the option you want.
To edit/delete/enable/disable any of the above options:
Select the relevant row and click
Edit/Delete/Enable/Disable
.
Notes:
•
Physical interfaces cannot be deleted.
• Editing an interface that is part of a switch or a bridge lets you remove it from the switch or
bridge.
• When a LAN or DMZ interface is part of an Internet connection, it is still visible on this page,
but can be only be configured through the
Device
>
Internet
page.
• For each network, the table on this page shows you:
• Name - Name of the network, interfaces that participate (if there are multiple interfaces),
and a description (optional)
• Local IP Address
•
Subnet Mask
• MAC Address