Setting Static Routes 117 Firewall’s WAN link is connected directly to the Internet router — Usethis setting if the Firewall is protecting the entire network. This is thedefault setting.Click Update to save the configuration. Specified address ranges are attached to the LAN link — Select thiswhen it is easier to specify which devices are on the LAN. If amachine’s IP address is not specified, all communications through theFirewall for that machine are blocked.Click Update to save the configuration. Specified address ranges are attached to the WAN link — Select thiswhen it is easier to specify which devices are on the WAN port.Click Update to save the configuration.Add RangeTo enter a range of addresses, such as the 51 IP addresses from192.168.23.50 to 192.168.23.100, type the starting address in theFrom Address box and the ending address in the To Address box. Tospecify an individual address, type it in the From Address box only. Youcan specify up to 64 address ranges.Click the Update button to save the configuration.Setting StaticRoutesIf the LAN has internal routers, you must specify their addresses andnetwork information.Use static routes if the LAN is segmented into subnets, either for size orpractical considerations. For example, you can create a subnet which onlycontains an organization’s graphic design shop, isolating it from traffic onthe rest of the LAN.This example is shown in Figure 53 below. Traffic on each network isseparated. PCs on the design shop network communicate with PCs onthe core network via router R2. PCs on the core network communicatewith PCs on the design network via the Firewall F then the router R2.DUA1611-0AAA02.book Page 117 Thursday, August 2, 2001 4:01 PM
