Configure an External Interface

1. Select Network > Configuration.
   The Network Configuration dialog box appears.
2. Select an external interface. Click Configure.
   The Interface Settings dialog box appears.
3. On the IPv4 tab, select Use Static IP.
4. In the IP address text box, type or select the IP address of the interface.
5. In the Default Gateway text box, type or select the IP address of the default gateway.

6. Click OK.

1. Select Network > Interfaces.
   The Network Interfaces page appears.
2. Select an external interface. Click Edit.
3. From the Configuration Mode drop-down list, select Static IP.
4. In the IP address text box, type the IP address of the interface.
5. In the Gateway text box, type the IP address of the default gateway.

6. Click Save.

1. Select Network > Interfaces.
   The Network Interfaces page appears.
2. Select an external interface. Click Configure.
3. From the Configuration Mode drop-down list, select PPPoE.
4. Select an option:
   • Obtain an IP address automatically
   • Use this IP address (supplied by your Internet Service Provider)
5. If you selected Use this IP Address, in the adjacent text box, type the IP address.
6. Type the User Name and Password. Type the password again.
   ISPs use the email address format for user names, such as [email protected].

7. To configure additional PPPoE options, click Advanced.
   Your ISP can tell you if you must change the timeout or LCP values.

8. Configure the PPPoE properties, as described in the next procedure.

1. Select Network > Configuration.
   The Network Configuration dialog box appears.
2. Select an external interface. Click Configure.
   The Interface Settings dialog box appears.
3. On the IPv4 tab, select Use PPPoE.
4. Select an option:
   • Obtain an IP address automatically
   • Use IP address (supplied by your Internet Service Provider)
5. If you selected Use IP Address, in the adjacent text box, type or select the IP address.
6. Type the User Name and Password.Type the password again.
   ISPs use the email address format for user names, such as [email protected].

7. To configure PPPoE options, click Advanced Properties.
   The PPPoE Properties dialog box appears. Your ISP can tell you if you must change the timeout or LCP values.

8. Configure the PPPoE properties, as described in the next procedure.

1. Select when the device connects to the PPPoE server:
   • Always-on — The Firebox keeps a constant PPPoE connection. It is not necessary for network traffic to go through the external interface.
     If you select this option, type or select a value in the PPPoE initialization retry every text box to set the number of seconds that PPPoE tries to initialize before it times out.
   • Dial-on-demand — The Firebox connects to the PPPoE server only when it gets a request to send traffic to an IP address on the external interface.
     If your ISP regularly resets the connection, select this option.
     If you select this option, in the Idle timeout in text box, set the length of time a client can stay connected when no traffic is sent.
     If you do not select this option, you must manually restart the device each time the connection resets.
2. If your ISP requires the Host-Uniq tag for PPPoE discovery packets, select the Use Host-Uniq tag in PPPoE discovery packets check box.
3. To use LCP echo requests to detect lost PPPoE connections, select the Use LCP echo requests to detect lost PPPoE connections check box.
   This is enabled by default.
4. In the LCP echo failure in text box, type or select the number of failed LCP echo requests allowed before the PPPoE connection is considered inactive and closed.
5. In the LCP echo timeout in text box, type or select the length of time, in seconds, that the response to each echo timeout must be received.
6. To configure the Firebox to automatically restart the PPPoE connection on a daily or weekly basis, select the Schedule time for auto restart check box.
7. From the Schedule time for auto restart drop-down list, select Daily to restart the connection at the same time each day, or select a day of the week to restart weekly. Select the hour and minute of the day (in 24 hour time format) to automatically restart the PPPoE connection.
8. In the Service Name text box, type a PPPoE service name.
   This is either an ISP name or a class of service that is configured on the PPPoE server. Usually, this option is not used. Select it only if there is more than one access concentrator, or you know that you must use a specified service name.
9. In the Access Concentrator Name text box, type the name of a PPPoE access concentrator, also known as a PPPoE server. Usually, this option is not used. Select it only if you know there is more than one access concentrator.
10. In the Authentication retries text box, type or select the number of times that the Firebox can try to make a connection.
    The default value is three (3) connection attempts.
11. In the Authentication timeout text box, type a value for the amount of time between connection attempt retries.
    The default value is 20 seconds between each connection attempt.
12. If you configure the PPPoE settings to use a static IP address, you can select one of three options for PPPoE IP address negotiation:
    • Send PPPoE client static IP address during PPPoE negotiation — This option configures the device to send the PPPoE client IP address to the PPPoE server during PPPoE negotiation. This is the default setting.
    • Don't send PPPoE client static IP address during PPPoE negotiation — This option configures the device not to send the PPPoE client IP address to the PPPoE server.
    • Send and enforce PPPoE client static IP address during PPPoE negotiation — This option configures the device to send the PPPoE client IP address to the PPPoE server, and use the configured IP address even if another IP address is obtained from the PPPoE server. To use this option, the device must use Fireware XTM v11.8.1 or higher.
13. To configure the Firebox to negotiate DNS with the PPPoE server, select the Negotiate DNS with PPPoE Server check box. This is enabled by default. Clear this check box if you do not want the device to negotiate DNS.
14. Click OK.

1. From the Configuration Mode drop-down list, select DHCP.
2. If your ISP or external DHCP server requires a client identifier, such as a MAC address, in the Client text box, type this information.
3. To specify a host name for identification, in the Host Name text box, type the host name.

4. To manually assign an IP address to the external interface, in the Use this IP address text box, type the IP address.
   To configure the external interface to obtain an IP address automatically, clear the Use this IP address text box.
   
5. To change the lease time, select the Lease Time check box and specify the value in the adjacent text box and drop-down list.
   IP addresses assigned by a DHCP server have an eight hour lease by default; each address is valid for eight hours.

1. Select Network > Configuration.
   The Network Configuration dialog box appears.
2. Select an external interface. Click Configure.
   The Interface Settings dialog box appears.
3. On the IPv4 tab, select Use DHCP Client.
4. If your ISP or external DHCP server requires a client identifier, such as a MAC address, in the Client text box, type this information.
5. To specify a host name for identification, in the Host Name text box, type the host name.

6. To enable DHCP to assign an IP address to the device, in the Host IP section, select Obtain an IP automatically.

To manually assign an IP address and use DHCP to give this assigned address to the device, select Use IP address. In the adjacent text box, type the IP address.

IP addresses assigned by a DHCP server have an eight hour lease by default, which means the address is valid for eight hours.

7. To change the lease time, select the Leasing Time check box. From the adjacent drop-down list, select the lease time value.