Similarly to the Configure WAN page, the settings utilized to configure the LAN is dependent on which mode is selected. The information we need to configure the LAN include:
- The Alias name for the LAN.
- The IP assigned to the LAN interface.
- The subnet mask for the LAN network.
- The interface the LAN will be connected to.
The LAN configuration would show as below if the device is configured in Routed Mode or Translucent Mode (the only difference being that the IP address on the LAN would be the same as the WAN IP):
The NAT Mode LAN configuration would appear as:
In 12.2.0+ there is an additional Zone option. The Zone type would fall under one of these three categories:
External - This option allows outside traffic to be routed into the network. This is used for WAN connections
Trusted - Trusted will allow traffic to be routed to other networks on this Ecessa. This is the most common option for LANs
Private - This option will mark the LAN as a DMZ, and LAN to LAN traffic will not be allowed. The Firewall feature must be enabled for this setting to function
Note that the Routed/Translucent LAN has WAN1 selected from the “Routed Via” drop down. To complete additional LAN networks, click ‘Add’ to the right of the configuration options. Then click ‘Activate’ at the bottom of the page to save changes made to the Configure LAN page when finished.
The Ecessa device may provide DHCP for any LAN, however, only a single LAN per port may serve DHCP addresses. If multiple DHCP-capable LANs but share the same Ethernet port VLANs must be used.
On the LAN configuration page, select the DHCP setting to display the DHCP configuration section.
The DHCP scope must have the following settings configured:
- Starting IP: The first available IP address in the DHCP scope
- Ending IP: The last available IP address in the DHCP scope
- Lease Time: DHCP lease expiration time in seconds
Additional settings to configure include:
- DNS Name Server(s): Primary/Seconday name servers for DHCP client use. May be internal or external servers.
- Domain: The DNS suffix given to DHCP clients.
- Recursive Resolver: If enabled, the Ecessa unit will provide its own address as the DNS name server for DHCP clients. To answer DNS requests, it will use the DNS name servers configured in the DHCP section as forwarders. If no DNS name servers are specified on the LAN configuration page, the unit will use the DNS resolver addresses specified on the Services configuration page. Note: by default the Primary DNS resolver address is 127.0.0.1 which will prevent DNS resolution from working properly if no other DNS servers are configured.
Advanced DHCP configuration settings are accessed with the [Advanced DHCP] link at the bottom of the DHCP section on the LAN configuration page. These settings include the following:
DHCP Options per RFC 2132 may be added. The Option field refers to the DHCP Option Number and the Option Data field refers to the data related to the option. The value type of the Option Data field is dependent on the DHCP option specified.
Static DHCP IPs specifies a MAC-IP address pairing to ensure certain devices on the LAN network will always receive the same IP address.
Although most LAN networks are configured similarly, there are exceptions which are not covered in this manual. If there are any questions about how to configure your environment, contact Ecessa Technical Support at firstname.lastname@example.org, or call (800) 669-6242 x 2.