Routing Mode Configuration Wizard

In routing mode you can bind all interfaces to Layer 3 security zones, and configure interfaces' IP addresses and policy rules between different security zones according to network structure and security requirement. Under such a configuration, a device can provide both route and security policy functions. In routing mode you can also configure NAT rules for address translation. In such a case the security appliance will locate between the internal and external network.

This section describes routing mode configuration wizard. You can complete device's routing mode configuration easily and quickly via the wizard.

To configure a network connection in routing mode via the configuration wizard, take the following steps:

  1. On the Navigation pane, click Configure > Network > Network to visit the Network page.
  2. On the Task tab in the right auxiliary pane, click Routing Mode.
  3. In the Routing Mode Configuration dialog, read the Welcome page and click Next. In the WAN Interface 1 page, configure options for WAN.
    Functions Options
    Interface Specifies an interface that is connected to external network.
    Layer 3 zone Specifies a security zone for the interface.
    Type

    Static IP: Specifies a static IP address for the interface. Related options include:

    • IP address: Specifies a static IP address for the interface.
    • Netmask: Specifies a netmask for the interface.
    • Gateway: Specifies an address for the gateway.
    Auto-obtain: Obtains an IP address automatically via DHCP. If this option is selected, the gateway information provided by the DHCP server will be set to the default network route automatically.

    PPPoE: Obtains an IP address via PPPoE. Related options include:

    • Username: Type the username provided by ISP.
    • Password: Type the corresponding password.
    • Confirm password: Enter the password again to make confirmation.
    When choosing to obtain an IP address via PPPoE, the gateway information provided by the PPPoE server will be set to the default network route automatically.
    System DNS 1 Specifies an IP address for the primary DNS server.
    System DNS 2 Specifies an IP address for the alternative DNS server.
    Create SNAT rule automatically Select the check box to create source NAT rules automatically according to interface configuration.
  4. To configure multiple WAN interfaces, select the check box, and click Next. In the WAN Interface 2 page, configure options for WAN Interface 2. The options are the same with those of WAN Interface 1.
  5. Click Next. In the LAN Interface 1 page, configure options for LAN.
    Functions Options
    Interface Specifies an interface that is connected to internal network.
    Layer 3 zone Specifies a security zone for the interface.
    IP address Specifies an IP address for the interface.
    Netmask Specifies a netmask for the interface.
    Management Specifies a management method for the interface.
    Enable DHCP server Enable DHCP server on the interface to allocate IP addresses for the PCs that are connected to the LAN interface. Type the IP range for the allocation into the Address pool boxes.
    DNS

    Specifies how to obtain LAN interface's DNS servers, including:

    • Use system DNS: Uses the DNS server bundled with system.
    • User-defined DNS: Click this option button and type DNS servers' IP addresses into the DNS1 and DNS2 boxes.
  6. To configure multiple LAN interfaces, select the check box, and click Next. In the LAN Interface 2 page, configure options for LAN Interface 2. The options are the same with those of LAN Interface 1.
  7. Click Next. In the Policy page policy rules that allow traffic transmission between LANs and WANs are created automatically according to LANs and WANs' configuration. You cannot edit any policy rule in this page. To edit a policy rule, close the wizard and edit it in the Policy section.
  8. Click OK to submit the configuration and close the wizard.