Advanced Properties" Tab - Stormshield SN series Configuration Manual

This table appears if the option Fixed IP (static) has been selected.
IP address
Net Mask
Comments
Here, several associated IP addresses and network masks may be defined for the same bridge
(the need to create aliases, for example). These aliases may allow you to use this Stormshield
Network firewall as a central routing point. As such, a bridge can be connected to various sub-
networks with a different address range. To add or remove them, simply use the Add and Delete
buttons located above the fields in the table.
Several IP addresses (aliases) can be added in the same address range on an interface. In this
case, these addresses must all have the same mask. Reloading the network configuration will
apply this mask on the first address and a mask /32 on the following addresses.

"Advanced properties" tab

MTU
Physical (MAC)
address
DHCP
This field will be indicated as "disabled" if the option Dynamic IP (obtained by DHCP) was
not selected in the General tab, and options will be grayed out.
DNS name (optional) Name of the DNS server (FQDN) for the connection.
Requested lease time
(seconds)
Page 185/448
IP address assigned to the bridge. (All interfaces contained in the bridge will have the
same IP address).
Network mask of the sub-network to which the bridge belongs. The various interfaces
that are part of the bridge have the same IP address so all networks connected to the
firewall are part of the same address range. The network mask provides the firewall
with information about the network to which it belongs.
Allows adding comments regarding the bridge's address.
Maximum length (in bytes) of frames transmitted on the physical support (Ethernet)
so that they are sent at one go (without fragmentation).
Warning
This option is not accessible for firewalls in high availability.
This window allows you to specify a MAC address for an interface instead of using the
address assigned by the firewall. This allows you to better facilitate the integration of
the Stormshield Network firewall in transparent mode into your network (by specifying
your router's MAC address instead of having to reconfigure all the workstations using
this MAC address).
When the MAC address is assigned to the bridge, all interfaces contained in this bridge
will then have the same MAC address.
This address consists of 6 bytes in hexadecimal separated by :
NOTE
This optional field does not identify the DHCP server but the firewall. If this field has
been entered and the external DHCP server has the option of automatically updating
the DNS server, the DHCP server will automatically update the DNS server with the
name and the IP address provided by the firewall.
This name consists of 6 bytes in hexadecimal separated by ":"
Period during which the IP address is kept before renegotiation.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
INTERFACES