Configure A Vlan Profile - NETGEAR UTM5 Reference Manual

ProSecure Unified Threat Management (UTM) Appliance
• WINS server (if you entered a WINS server address in the DHCP Setup screen)
• Lease time (the date obtained and the duration of the lease).
DHCP Relay
DHCP relay options allow you to make the UTM a DHCP relay agent for a VLAN. The DHCP
relay agent makes it possible for DHCP broadcast messages to be sent over routers that do
not support forwarding of these types of messages. The DHCP relay agent is therefore the
routing protocol that enables DHCP clients to obtain IP addresses from a DHCP server on a
remote subnet. If you do not configure a DHCP relay agent for a VLAN, its clients can obtain
IP addresses only from a DHCP server that is on the same subnet. To enable clients to obtain
IP addresses from a DHCP server on a remote subnet, you need to configure the DHCP
relay agent on the subnet that contains the remote clients, so that the DHCP relay agent can
relay DHCP broadcast messages to your DHCP server.
DNS Proxy
When the DNS proxy option is enabled for a VLAN, the UTM acts as a proxy for all DNS
requests and communicates with the ISP's DNS servers (as configured on the WAN ISP
Settings screens). All DHCP clients receive the primary and secondary DNS IP addresses
along with the IP address where the DNS proxy is located (that is, the UTM's LAN IP
address). When the DNS proxy option is disabled for a VLAN, all DHCP clients receive the
DNS IP addresses of the ISP but without the DNS proxy IP address. A DNS proxy is
particularly useful in auto-rollover mode. For example, if the DNS servers for each WAN
connection are different servers, then a link failure might render the DNS servers
inaccessible. However, when the DNS proxy option is enabled, the DHCP clients can make
requests to the UTM, which, in turn, can send those requests to the DNS servers of the active
WAN connection. However, disable the DNS proxy if you are using a multiple WAN
configuration in auto-rollover mode with route diversity (that is, with two different ISPs) and
you cannot ensure that the DNS server is available after a rollover has occurred.
LDAP Server
A Lightweight Directory Access Protocol (LDAP) server allows a user to query and modify
directory services that run over TCP/IP. For example, clients can query email addresses,
contact information, and other service information using an LDAP server. For each VLAN,
you can specify an LDAP server and a search base that defines the location in the directory
(that is, the directory tree) from which the LDAP search begins.

Configure a VLAN Profile

For each VLAN on the UTM, you can configure its profile, port membership, LAN TCP/IP
settings, DHCP options, DNS server, and inter-VLAN routing capability.
The preconfigured default VLAN is called defaultVLAN. A UTM9S in which a wireless module
is installed also has a default WLAN with the name defaultWLAN.
LAN Configuration
96