Routing and WAN connections
388
11.6
Advanced Routing and Forwarding
BAT54-Rail/F..
Release
7.54
06/08
masking should take place for the intranet area only or for the DMZ as
well.
Apart from masking, network type also influences the automatic genera-
tion of VPN rules. These rules are automatically generated for intranets
only, and not for 'DMZ' type networks.
Networks can be marked as 'Intranet' or as 'DMZ' to enable control over
these options.
D Disabled: The network is disabled.
D Intranet: The network is an intranet.
D DMZ: The network is a DMZ.
Note: Networks of the type 'DMZ' are visible to all other networks, indepen-
dent of any interface tags—this is useful as the DMZ often hosts public
servers such as web servers, etc. The DMZ networks themselves can
only see networks with the same interface tag (and any other DMZ net-
works, of course).
D VLAN ID
VLAN ID for the network.
Several separate networks can be operated over a single logical inter-
face. Each network is assigned with its own VLAN-ID. The physical inter-
face of the BAT Router for data streams from networks with different
VLAN-IDs as one; these streams are separated for their virtual networks
by a VLAN-capable switch.
For each network marked by a VLAN ID, the BAT Router has an IP
address in that network so that it can be access via IP. The VLAN-ID
ensures the correct assignment of IP networks and VLANs.
Note: In certain cases the BAT Router does not need an IP address, such
when a VLAN is only used as a bridge between WLAN and LAN. On oc-
casion it can even be undesirable for the BAT Router to be accessible
within this VLAN.
For example: A central BAT Router provides connectivity to an access
point with three logical WLANs for intranet, guest access and Voice over
IP. The intranet remains untagged, the guest access is given VLAN ID 1
and VoIP is given VLAN ID 2. Based on the VLAN IDs, the central router
permits users in the intranet to access the Internet and via VPN to the
headquarters; visitors in the guest WLAN only have access to the Inter-
net.
To Next Page
Loading...
Need help?
General
