To set up your iShield device to interact with your network you would need to set up your Network interfaces.
From the Configuration Menu, select the Networks & Interfaces to display the setup options.
You will notice on the SMB device you have 4 physical interfaces and on the Rackmount and Business devices you will have 6 physical interfaces.
We will be using the SMB device for this tutorial.
By default ether1 is set as the WAN interface and ether2 is set as the LAN interface
To edit the interface select the blue spanner of the interface you would like to configure, it will then open another popup window, as per below.
Ether 1 - WAN
The following options are available.
1. Description: You can add a description to best suited for you, such as WAN, Fibre or LTE
2. Designation: You have 2 options from the dropdown, WAN or LAN.
3. Mode: You can either select DHCP or Static
DHCP is mostly used on your WAN type designation as it will receive an IP address from the ISP router.
Use static if your ISP has given you an IP address that must be used.
Once you have made your changes, select the Save Changes radio button, this will commit your changes.
** A second interface can be configured as a WAN interface to be used as a failover connection.
Ether 2 - LAN
The same process is used to configure the other interfaces.
Ether2 interface above is an example of the LAN interface configuration, as you can see it the only difference is the Designation which is now set to LAN. You would connect the ether cable from Ether2 to your network switch.
On the LAN setup you would set your mode to Static IP address and add the IP range that you would be using for your local network.
Select the blue Add IP Address radio button
Enter your IP address bearing in mind that this will become your LAN gateway IP address.
Once you have your IP address added, select the blue Add radio button to add the IP address
Select the Blue Save changes radio button to save the Interface changes.
** To remove an IP address just select the Blue bin icon and save changes.
Creating VLANs, select the blue Add VLAN Interface radio button.
The below popup window will be displayed.
Select the Physical Network Interface that the VLAN will use for breakout
Set your VLAN ID: this must be the same ID that you have configured and set up on your managed switch.
Set the designation: LAN or WAN
Set your Mode required: Static or DHCP (most cases its static)
Select the blue Add IP Address radio button, enter the required IP address details then select the blue Add radio button.
Select the blue Add VLAN radio button to save the VLAN configuration.
Some ISPs use a VLAN for connectivity, they will supply you with the VLAN details that you would been to set up, in this case you would select the designation as WAN.
The network ranges need to be set according to the Network IP ranges of your LAN network interfaces.
This is quite important as it will determine what IP Address range to use for your DNS and DHCP service.
By default the unit has 2 ranges preconfigured to cover most of your private IP ranges, you can edit the range by selecting the blue spanner icon or you can add a range. It would be recommended to edit the range and subnet to that of your network range that you will be using.
Please note that when you add a new range or rename current range, only use lower case characters only.
Network scanning is enabled by default to scan the devices on the network, this will pull as much info it can from the device and display the details in the device section, info such as open ports See below example.
** Active scanning of a network can cause some incorrectly configured anti-virus packages to block the firewall. To disable the active scanning un tick the enable active network scanning.
You can exclude a single host or network by selecting the blue Add Scan Exclusion radio button.