BAS-SVX069F-EN
15
Figure 11. ETH 1 (LAN Port) configuration (Advanced tab)
6. If the device is in Hub mode, click the SSwwiittcchh ttoo PPoorrtt IIssoollaattee mmooddee button.
7. If the change in step 6 was required, click SSaavvee CCoonnffiigguurraattiioonn, which opens the SSaavvee
CCoonnffiigguurraattiioonn ddiiaalloogg.
8. Click SSaavvee AAllll. After the save operation is complete, reboot the WR21.
Configuring the Firewall
If you would like the customer to retain access to the Tracer BAS for devices on the customer
network, a firewall rule should be added to the DIGI WR21. This will not allow Internet users to
access the Tracer BAS.
NNoottee:: This section should only be followed if the ETH 0 IP address is a non-routable private IP
address. (i.e. 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16).
1. Click SSeeccuurriittyy from the left hand menu, then FFiirreewwaallll from the window on the right.
2. Click the EEddiitt button on line 10. Replace 192.168.2.0/24 with the IP address and prefix length
used to configure EETTHH 00. See the following figure for reference.
Figure 12. Configuring the firewall
NNoottee:: The number to be used for the prefix length can be determined by comparing the subnet
mask taken from the Tracer BAS controller to the table below.
CCoonnffiigguurraattiioonn RReeqquuiirreemmeennttss
To Next Page
Loading...
