You configure two network interfaces for the VPN 3002 to operate as a VPN device: the private interface and the public interface. If you used Quick Configuration as described in the VPN 3002 Hardware Client Getting Started manual, the system supplied many default parameters for the interfaces. Here you can configure them explicitly.

The VPN 3002 includes some IP routing functions: static routes, DHCP, and PPPoE. You configure static routes, the default gateway, and DHCP in the IP Routing section; see the Configuration | System | IP Routing screens. PPPoE requires no further configuration than supplying a username and password in the Public Interface parameter.

Configuration | Interfaces

This section lets you configure the private and public interfaces.

Private is the interface to your private network (internal LAN).
Public is the interface to the public network.

Configuring an Ethernet interface includes supplying an IP address and subnet mask, and setting speed and transmission mode.

Note Interface settings take effect as soon as you apply them. If the system is in active use, changes might affect tunnel traffic.

The table on the Configuration | Interfaces screen shows all installed interfaces and their status.

Figure 3-1: VPN 3002 Configuration | Interfaces Screen

To configure a module, either click the appropriate link in the status table; or use the mouse pointer to select the module on the back-panel image, and click anywhere in the highlighted area.

Interface

The VPN 3002 interface installed in the system. To configure an interface, click the appropriate link.

Ethernet 1 (Private), Ethernet 2 (Public)

To configure Ethernet interface parameters, click the appropriate highlighted link in the table or click in a highlighted module on the back-panel image. See Configuration | Interfaces | Private/Public.

DNS Server(s)

To configure DNS Server(s), click the highlighted link in the table. See Configuration | System |
Servers | DNS.

DNS Domain Name

To configure DNS Server(s), click the highlighted link in the table. See Configuration | System |
Servers | DNS.

Status

The operational status of this interface:

UP (green) = Configured, enabled, and operational; ready to pass data traffic.
DOWN (red) Configured but disabled or disconnected.
Testing = In test mode; no regular data traffic can pass.
Dormant (red) = Configured and enabled but waiting for an external action, such as an incoming connection.
Not Present (red) = Missing hardware components.
Lower Layer Down (red) = Not operational because a lower-layer interface is down.
Unknown (red) = Not configured or not able to determine status.
Not Configured = Present but not configured.
Waiting for DHCP/PPPoE = Waiting for DHCP or PPPoE to assign an IP address.

IP Address

The IP address configured on this interface.

Subnet Mask

The subnet mask configured on this interface.

MAC Address

This is the unique hardware MAC (Media Access Control) address for this interface, displayed in 6-byte hexadecimal notation. You cannot change this address.

Default Gateway

The IP routing subsystem routes data packets first using static routes, then the default gateway. If you do not specify a default gateway, the system drops packets it cannot otherwise route.

To configure a default gateway, click the appropriate highlighted link in the table or click in a highlighted module on the back-panel image. See Configuration | System | IP Routing | Default Gateways.

Configuration | Interfaces | Private

This screen lets you configure parameters for the private interface. It displays the current parameters, if any.

Figure 3-2: Configuration | Interfaces | Private Screen

Caution If you modify any parameters of the private interface that you are currently using to connect to the VPN 3002, you will break the connection, and you will have to restart the Manager from the login screen.

Disabled

To make the interface offline, click Disabled. This state lets you retain or change its configuration parameters.

If the interface is configured but disabled (offline), the appropriate Ethernet Link Status LED blinks green on the VPN 3002 front panel.

Static IP Addressing

To change the IP address of the private interface, click Static IP Addressing.

IP Address

Enter the IP address for this interface, using dotted decimal notation (for example, 192.168.12.34). Note that 0.0.0.0 is not allowed. Be sure no other device is using this address on the network.

Subnet Mask

Enter the subnet mask for this interface, using dotted decimal notation (for example 255.255.255.0). The Manager automatically supplies a standard subnet mask appropriate for the IP address you just entered. For example, the IP address 192.168.12.34 is a Class C address, and the standard subnet mask is 255.255.255.0. You can accept this entry or change it. Note that 0.0.0.0 is not allowed.

MAC Address

This is the unique hardware MAC (Media Access Control) address for this interface, displayed in 6-byte hexadecimal notation. You cannot change this address.

Speed

click the drop-down menu button and select the interface speed:

10 Mbps = Fix the speed at 10 megabits per second (10Base-T networks).
100 Mbps = Fix the speed at 100 megabits per second (100Base-T networks).
10/100 auto = Let the VPN 3002 automatically detect and set the appropriate speed, either 10 or 100 Mbps (default). Be sure that the port on the active network device (hub, switch, router, etc.) to which you connect this interface is also set to automatically negotiate the speed. Otherwise, select the appropriate fixed speed.

Duplex

click the drop-down menu button and select the interface transmission mode:

Auto = Let the VPN 3002 automatically detect and set the appropriate transmission mode, either full or half duplex (default). Be sure that the port on the active network device (hub, switch, router, etc.) to which you connect this interface is also set to automatically negotiate the transmission mode. Otherwise, select the appropriate fixed mode.
Full-Duplex = Fix the transmission mode as full duplex: transmits and receives at the same time.
Half-Duplex = Fix the transmission mode as half duplex: transmits or receives, but not at the same time.

Apply/Cancel

To apply your settings to the system and include them in the active configuration, click Apply. The Manager returns to the Configuration | Interfaces screen.

Reminder:

To save the active configuration and make it the boot configuration, click the Save Needed icon at the top of the Manager window.

To discard your settings, click Cancel. The Manager returns to the Configuration | Interfaces screen.

Configuration | Interfaces | Public

This screen lets you select a connection method—DHCP, PPPoE, or static IP addressing—for the public interface. It also allows you to disable the public interface.

Figure 3-3: Configuration | Interfaces | Public Screen

Disabled

To make the interface offline, click Disabled. This state lets you retain or change its configuration parameters.

DHCP Client

click this radio button if you want to obtain the IP address and subnet mask for this interface via DHCP. If you click this button, you do not make entries in the IP address and subnet mask parameters that follow.

PPPoE Client

click this radio button if you want to connect using PPPoE. If you select PPPoE, you do not make entries in the static IP addressing parameters that follow.

PPPoE User Name

If you have selected PPPoE, enter a valid PPPoE username.

PPPoE Password

If you have selected PPPoE, enter the PPPoE password for the username you entered above.

Verify PPPoE Password

If you have selected PPPoE, enter the PPPoE password again to verify it.

Static IP Addressing

click this radio button if you want to use a static IP address.

IP Address

If you are using static IP addressing, enter the IP address for this interface, using dotted decimal notation (for example, 192.168.12.34). Note that 0.0.0.0 is not allowed. Be sure no other device is using this address on the network.

Subnet Mask

If you are using static IP addressing, enter the subnet mask for this interface, using dotted decimal notation (for example, 255.255.255.0). The Manager automatically supplies a standard subnet mask appropriate for the IP address you just entered. For example, the IP address 192.168.12.34 is a Class C address, and the standard subnet mask is 255.255.255.0. You can accept this entry or change it. Note that 0.0.0.0 is not allowed.

MAC Address

This is the unique hardware MAC (Media Access Control) address for this interface, displayed in 6-byte hexadecimal notation. You cannot change this address.

Speed

If you are using static IP addressing, click the drop-down menu button and select the interface speed:

10 Mbps = Fix the speed at 10 megabits per second (10Base-T networks).
100 Mbps = Fix the speed at 100 megabits per second (100Base-T networks).
10/100 auto = Let the VPN 3002 automatically detect and set the appropriate speed, either 10 or 100 Mbps (default). Be sure that the port on the active network device (hub, switch, router, etc.) to which you connect this interface is also set to automatically negotiate the speed. Otherwise, select the appropriate fixed speed.

Duplex

If you are using static IP addressing, click the drop-down menu button and select the interface transmission mode:

Auto = Let the VPN 3002 automatically detect and set the appropriate transmission mode, either full or half duplex (default). Be sure that the port on the active network device (hub, switch, router, etc.) to which you connect this interface is also set to automatically negotiate the transmission mode. Otherwise, select the appropriate fixed mode.
Full-Duplex = Fix the transmission mode as full duplex: transmits and receives at the same time.
Half-Duplex = Fix the transmission mode as half duplex: transmits or receives, but not at the same time.

Apply / Cancel

To apply your settings to this interface and include your settings in the active configuration, click Apply. The Manager returns to the Configuration | Interfaces screen.

Reminder:

To save the active configuration and make it the boot configuration, click the Save Needed icon at the top of the Manager window.

To discard your settings, click Cancel. The Manager returns to the Configuration | Interfaces screen.

Table of Contents

Interfaces

Configuration | Interfaces

Reminder:

Reminder: