Table of Contents
Advertisement
Chapter 4: Networks
Note: You must assign a fixed address to the managed interface.
IP Address &
To assign a fixed IP address to the managed interface, complete these two fields: Enter
Netmask
the IP Address of the BSC managed interface in four-byte, dotted-decimal format; and
enter the Netmask (subnet mask) specifying which bits in the IP address correspond to the
network address and which bits correspond to the subnet portion of the address.
Obtain IP
To assign the managed interface IP address dynamically via DHCP, mark this checkbox.
settings from a
You can then enter an optional timeout value in the DHCP timeout field.
DHCP server for
the interface
NAT the
Mark this checkbox to activate Network Address Translation (NAT) to map all client IP
addresses to the
addresses on the managed side to the IP address of the BSC protected interface. Clear
protected
this checkbox to disable NAT.
interface
address
Note: If the BSC managed IP subnet is different from the protected IP subnet and NAT is
not enabled, then you must configure static routes on your network routers to reach the
managed network. These static routes would point to the BSC's protected interface as
their next "hop."
See "Configuring the BSC to Assign Fixed IP Addresses" on page 4-14 for more
information about mapping an individual wireless client IP address to a specific device IP
address on the protected side.
Enable multicast
Mark this checkbox to enable use of distance vector multicast routing protocol (DVMRP or
for this interface
PIM-SM) for this interface. You must enable this if you have one or more managed VLANs
that use multicast.
Note: When multicast is enabled on an interface, all clients on that interface can send/
receive multicast traffic without bandwidth or firewall restrictions.
Force proxy ARP
Mark this checkbox to enable the BSC to force proxy address resolution protocol (ARP)
for this interface
for traffic directed to clients behind the protected interface. If this checkbox is cleared, the
BSC determines whether the network setup requires proxy ARP. You should enable this
option only when the protected interface and the managed interface reside within the
same IP subnet.
Strict MAC
Mark the checkbox to prevent IP spoofing (users with a different MAC addressing being
enforcement of
able to takeover IP address using ARP poisoning). The BSC will use static ARP entries for
IP addresses
all clients on that VLAN. Note that the BSC will always use static ARP entries for the
following cases, regardless of the checkbox value: Spectralink/Polycom Phones; if
Mobility is enabled; MAC device authentication.
Default Role
If not specified, the default role for any interface is the Un-Registered role. In some
environments, you may want all connections on a VLAN to go directly into a Role. To do
4-10
Figure 4-6: Completed DHCP Relay Options
This checkbox marked by
default
List DHCP Servers
Advertisement
Table of Contents
