D-Link DFL-500, Руководство пользователя

Страница: 36 / 140

Editing addresses
Edit an address to change it's IP address and Netmask. You cannot edit the address name. If you need to
change an address name, you must delete the address and then re-add it with a new name.
Using the web-based manager:
· Go to Firewall > Address .
·
Select the interface with the address you want to edit.
·
Choose an address to edit and select Edit .
· Make the required changes and select OK to save your changes.
Deleting addresses
Delete an address to make it unavailable for use by policies. If an address is included in any policy, it cannot
be deleted unless it is first removed from the policy. See
Editing policies .
·
Go to Firewall > Address .
·
Select the interface list containing the address you want to delete.
· Choose an address to delete and select delete .
·
Click OK to delete the address.
Adding virtual IPs
NAT mode security policies hide the addresses in more secure networks from less secure networks. To allow
connections from a less secure network to a more secure network, you must make an association between a
destination address in the less secure network and an actual address in the more secure network. This
association is called a virtual IP.
By default virtual IPs are required for Ext to Int NAT mode policies.
Example virtual IP
Your web server has an IP address on the Internet, but the computer hosting your web server is located on
your internal network with a private IP address. To get packets from the Internet to your web server, you must
create a virtual IP that associates the Internet address of your web server with its actual IP address. The
actual address of the web server is called the mapping IP.
Once you have created a virtual IP, you can add policies to allow access to the mapping IP by adding the
virtual IP to the destination address of the Ext to Int policy that provides users on the Internet with access to
the web server.
Adding Virtual IPs
To add a virtual IP:
·
Go to Firewall > Virtual IP .
·
Select New to add the virtual IP.
·
Enter a Name for the virtual IP.
The name can contain numbers (0-9) and upper and lower case letters (A-Z, a-z), and the special
characters - and _. Other special characters and spaces are not allowed.
· In the IP Address field, enter the IP address of the server on the internal network.
DFL-500 User Manual
36