Add IPv4 and IPv6 addresses to Single Layer 2 Firewall interfaces

You can add IPv4 and IPv6 addresses to system communication interfaces on Single Layer 2 Firewalls.

  For more details about the product and how to configure features, click Help or press F1.

Steps

  1. Right-click a Single Layer 2 Firewall and select Edit Single Layer 2 Firewall.
    The Engine Editor opens.
  2. In the navigation pane on the left, select Interfaces.
    The Interfaces pane opens on the right.
  3. Right-click a Physical Interface or a VLAN Interface and select New > IPv4 Address or New > IPv6 Address.
  4. Configure the IPv4 or IPv6 address settings in one of the following ways:
    • Select Static and enter the IPv4 Address or IPv6 Address. The Network Settings are automatically entered.
      Tip: To resolve the IP address from a DNS name, right-click the field, then select Resolve From DNS Name.
    • Select Dynamic and select the DHCP index from the Dynamic Index drop-down list if the interface gets its IP address from a DHCP server. The DHCP Index is a number for your own reference to identify the DHCP interface.
  5. (IPv4 addresses and dynamic IPv6 addresses only) If necessary, define the contact address information.
    • Enter the default contact address or select Dynamic (next to the Default field) if the interface has a dynamic contact address. The default contact address is used by default whenever a component that belongs to another Location connects to this interface.
    • If components from some Locations cannot use the default contact address, click Exceptions to define Location-specific contact addresses.
  6. (Static IPv4 addresses only) The Netmask field is automatically populated. Adjust it as necessary.
  7. (Static IPv6 addresses only) The Prefix Length field is automatically populated. Adjust it as necessary.
  8. (Optional) Configure additional features for this interface:
    • (Dynamic IPv4 or IPv6 addresses only) If you do not want a default route to be created through the interface, deselect Automatic Default Route.
    • (Dynamic IPv6 addresses only) If you want to use DHCPv6 to get the IPv6 address, select Use DHCPv6 to get IPv6 Address.
  9. Click OK.
  10. Continue the configuration in one of the following ways:
    • If you are defining a new Layer 2 Firewall element, add traffic inspection interfaces.
    • If you are editing an existing Layer 2 Firewall element, select system communication roles for Layer 2 Firewall interfaces.

IP Address Properties dialog box (Single Layer 2 Firewall interface)

Use this dialog box to define the properties of a Single Layer 2 Firewall interface IP address.

Option Definition
IP Address type
  • If the interface has a static IP address, select Static.
  • If the interface has a dynamic IP address, select Dynamic.
Option Definition
When Static is selected
IPv4 Address or IPv6 Address Enter the IPv4 address or IPv6 address.
Contact Addresses section

(IPv4 addresses only)

  • Default — Used by default whenever a component that belongs to another Location connects to this interface.
  • Exceptions — Opens the Exceptions dialog box.
Network Settings section
  • Netmask — (IPv4 addresses only) Automatically populated IP address or netmask length (1–32). You can change this value if needed.
  • Prefix Length — (IPv6 addresses only) Automatically filled-in length. Adjust it if necessary by entering a value between 0–128.
  • Network Address — The network address is automatically filled in and cannot be edited.
  • Broadcast IP Address — (IPv4 addresses only) The broadcast IP address is automatically filled in and cannot be edited.
Comment Adds a comment to the IP address.
Option Definition
When Dynamic is selected
Dynamic Index Select the number to identify the DHCP interface.
Contact Addresses section
  • Dynamic — Used when interface has a dynamic contact address.
  • Exceptions — Opens the Exceptions dialog box.
Comment Adds a comment to the IP address.
Automatic Default Route Enables the automatic creation of a default route for the interface.
IPv6 Settings section

(IPv6 addresses only)

Use DHCPv6 to get IPv6 Address — When selected, the engine uses DHCPv6 to get the IPv6 address.

By default, IPv6 addresses are acquired using Stateless Address Autoconfiguration (SLAAC).

Resolve IP Address From DNS Name dialog box

Use this dialog box to resolve an IP address from a DNS name.

Option Definition
DNS Name The DNS name that you want to resolve.
Resolve Select to display a list of IP addresses that the DNS name resolves to.
Note: The IP addresses are resolved by the computer running the Management Client.
IP Address Select the IP address that you want to use.