Multitech PROXYSERVER MTPSR1-120, Руководство пользователя

Страница: 10 / 110

10 MTPSR1-120
Firewall User Guide
Typical Applications
This section describes three typical applications and assumes that the Firewall will be configured for
a particular application during the initial installation. Each example includes a detailed system-type
diagram.
In the first of these applications, the Firewall connects a private LAN to the Internet through a cable
modem or a Digital Subscriber Line (DSL) modem, thus providing high speed Internet access. The
second application ties a private LAN and public Internet Services Network (e.g., an existing public
LAN) through its router to the Internet. The third application is similar to the second, but uses a Data
Communications Equipment (DCE) device—in this example, a T1 DSU—connected to the RS232
port on the back panel of the Firewall to connect to the Internet.
Configuration 1 - Cable/DSL Modem
In Figure 1-1, a private LAN is connected to the ETHERNET 1 jack on the back panel of the Firewall.
Internet access is provided through a cable modem or DSL modem that is connected to the
ETHERNET 2 jack on the Firewall.
MTPSR1-120 Firewall
IP Address 192.168.0.101
Mask 255.255.255.0
Internet
Novell Server
IP Address
192.168.0.102
Windows NT Server
IP Address
192.168.0.103
Mail Server
IP Address
192.168.0.104
Workstation
IP Address
192.168.0.105
Workstation
IP Address
192.168.0.106
Workstation
IP Address
192.168.0.107
HUB
TM
TM
LAN 1
Private
LAN 2
Public
Private LAN
Cable/DSL
Modem
Figure 1-1. Cable/DSL Modem Configuration
When the Firewall software is loaded, the Secured LAN Port Parameters are configured to include an
unregistered IP Address and associated Net Mask for the private LAN (on ETHERNET 1). Then, the
Internet LAN Port Parameters are configured with the DHCP Client option active. This enables the
Internet Services Provider (ISP) to dynamically provide the registered Internet IP addresses at each
login. (If a static IP addressing scheme is provided by the ISP, then the assigned static IP address is
used instead.)