Cisco Small Business Pro SA 520W Administration Manual page 73

Networking
Configuring a DMZ
STEP 5
STEP 6
NOTE
Cisco SA 500 Series Security Appliances Administration Guide
- DHCP Relay: Choose this option to allow the security appliance to use a
DHCP Relay. If you choose this mode, also enter the IP address of the
Relay Gateway.
• Domain Name (optional): Enter a name for the domain.
• Starting IP Address and Ending IP Address: Enter the range of addresses
in the IP address pool for this security appliance. Any new DHCP client that
joins the DMZ is assigned an IP address in this range.
• Primary DNS Server and Secondary DNS Server (Optional): Enter the IP
address of the primary DNS server for the DMZ. Optionally, enter the IP
address of a secondary DNS server.
• Primary Tftp Server and Secondary Tftp Server (Optional): Enter the IP
address of the primary and secondary Tftp servers for the DMZ
• WINS Server (Optional): Enter the IP address for the WINS server or, if
present in your network, the Windows NetBios server.
• Lease Time: Enter the maximum connection time in hours that a dynamic IP
address is "leased" to a network user. When the time elapses, the user is
automatically assigned a new dynamic IP address. The default is 24 hours.
• Relay Gateway: If you chose DHCP Relay as the DHCP mode, enter the IP
address of the relay gateway.
In the DMZ Proxies section, check the box to allow the DMZ to act as a proxy for
all DNS requests and to communicate with the DNS servers of the ISP. When this
feature is disabled, all DHCP clients on the DMZ receive the DNS IP addresses of
the ISP.
Click Apply to save your settings, or click Reset to revert to the saved settings.
Next steps:
• If you are using the Getting Started (Advanced) page, click Getting Started
in the menu bar, and then click Advanced in the navigation tree to continue
with the list of configuration tasks.
• Required: You must configure a firewall rule to allow inbound traffic to
access your DMZ. Also use the firewall rule to specify a public IP address
for a server on your DMZ, if applicable. To get started, click Firewall on the
menu bar. For more information, see
Inbound Traffic, page
Configuring a Firewall Rule for
125.
3
73