Managing The Network Database - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual

Some advantages of the network database are:
• Generally, you do not need to enter either IP address or MAC addresses. Instead, you can just
select the name of the desired PC or device.
• There is no need to reserve an IP address for a PC in the DHCP server. All IP address
assignments made by the DHCP server are maintained until the PC or device is removed from
the network database, either by expiration (inactive for a long time) or by you.
• There is no need to use a fixed IP address on a PCs. Because the IP address allocated by the
DHCP server never changes, you do not need to assign a fixed IP address to a PC to ensure
that it always has the same IP address.
• A PC is identified by its MAC address—not by its IP address. The network database uses the
MAC address to identify each PC or device. Therefore, changing a PC's IP address does not
affect any restrictions applied to that PC.
• Control over PCs can be assigned to groups and individuals:
– You can assign PCs to groups (see
this page) and apply restrictions (LAN WAN outbound rules, LAN DMZ outbound rules,
LAN WAN inbound rules, and LAN DMZ inbound rules) to each group (see
to Block or Allow Specific Kinds of Traffic" on page
– If necessary, you can also create firewall rules to apply to a single PC (see
Source MAC Filtering" on page
PC, users cannot avoid these restrictions by changing their IP address.

Managing the Network Database

You can view the network database, manually add or remove database entries, and edit database
entries.
To view the network database:
1. Select Network Configuration > LAN Settings from the menu. The LAN Settings submenu
tabs display, with the LAN Setup screen in view (see
2. Click the LAN Groups submenu tab. The LAN Groups screen displays (see
page 3-16, which shows some examples in the Known PCs and Devices table).
LAN Configuration
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
"Managing the Network Database" on page
4-44). Because the MAC address is used to identify each
v1.0, April 2010
4-2).
Figure 3-2 on page 3-6).
3-15" on
"Using Rules
"Enabling
Figure 3-6 on
3-15