Cisco ISA500 Series Administration Manual page 44

Wizards
Using the Startup Wizard
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
If you have a DMZ port, the DMZ Configuration window opens. To host public
services, you need to configure a DMZ network in this page and specify the
relevant DMZ services from the next DMZ Service page.
• IP: Enter the subnet IP address of the DMZ.
• Netmask: Enter the subnet mask of the DMZ.
• DHCP Service: Choose one of the following options:
- Disable: Choose this option if the computers on the DMZ are configured
with static IP addresses or are configured to use another DHCP server.
- DHCP Server: Allows the security appliance to act as a DHCP server and
assigns IP addresses to all devices that are connected to the DMZ. Any
new DHCP client joining the DMZ is assigned an IP address of the DHCP
pool.
- DHCP Relay: Allows the security appliance to use a DHCP Relay. If you
choose DHCP Relay, enter the IP address of the remote DHCP server in
the Relay IP field.
If you choose DHCP Server as the DHCP mode, enter the following information:
• Start IP: Enter the starting IP address of the DHCP pool.
• End IP: Enter the ending IP address of the DHCP pool.
The starting and ending IP addresses should be in the same range as
NOTE
the DMZ's subnet address.
• Lease Time: Enter the maximum connection time that a dynamic IP address
is "leased" to a network user. When the time elapses, the user is
automatically renewed the dynamic IP address.
• DNS 1: Enter the IP address of the primary DNS server.
• DNS 2: Optionally, enter the IP address of the secondary DNS server.
• WINS 1: Enter the IP address for the primary WINS server.
• WINS 2: Optionally, enter the IP address of the secondary WINS server.
• Domain Name: Optionally, enter the domain name for the DMZ.
• Default Gateway: Enter the IP address of default gateway.
2
38