Check Point L-71, Руководство администратора

Страница: 76 / 124

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 76
To edit a default route:
1. In
Device
>
Internet
, click the Internet connection.
2. Click Edit .
The
Edit Internet Connection
window opens in the
Configuration
tab.
3. Set the Default gateway (next hop) to a different IP address.
4. Click Apply .
When no default route is active, this message shows: "Note - No default route is configured.
Internet connections might be down or not configured."
For Internet Connection High Availability, the default route changes automatically on failover
(based on the active Internet connection).
When a network interface is disabled, all routes that lead to it show as
inactive
in the routing
page. A route automatically becomes active when the interface is enabled. Traffic for an inactive
route is routed based on active routing rules (usually to the default route).
The edit, delete, enable, and disable options (on the
Device
>
Local Network
page) are only
available for manually defined routing rules created on this page. You cannot edit, delete, enable,
and disable routing rules created by the operating system for directly attached networks or rules
defined by the dynamic routing protocol.
To edit an existing route:
Select the route and click Edit .
To delete an existing route:
Select the route and click
Delete
.
To enable/disable an existing route:
Select the route and click
Enable
or
Disable
.
Configuring MAC Filtering
MAC Filtering
MAC Filtering lets you manage a whitelist of MAC addresses that can access the LAN. All others
are blocked. The list is global for all interfaces defined on physical LAN ports.
To enable MAC filtering:
1. Turn the slider to
ON
.
2. Add a MAC address to the LAN MAC Filter whitelist.
Note - MAC filtering is not active when no MAC addresses are defined.
After MAC filtering is enabled, you can disable the feature for specified networks.
To edit the LAN MAC Filter whitelist:
1. Go to
Device
>
MAC Filtering
>
LAN MAC Filter
.
2. To add a new MAC Address, click Add > New .
3. To select MAC addresses from the list of Active Devices, click Add > Select .