Specifications

Chapter 4: Networks
4-10
)
Note: You must assign a fixed address to the managed interface.
IP Address &
Netmask
To assign a fixed IP address to the managed interface, complete these two fields: Enter
the IP Address of the BSC managed interface in four-byte, dotted-decimal format; and
enter the Netmask (subnet mask) specifying which bits in the IP address correspond to the
network address and which bits correspond to the subnet portion of the address.
Obtain IP
settings from a
DHCP server for
the interface
To assign the managed interface IP address dynamically via DHCP, mark this checkbox.
You can then enter an optional timeout value in the DHCP timeout field.
NAT the
addresses to the
protected
interface
address
Mark this checkbox to activate Network Address Translation (NAT) to map all client IP
addresses on the managed side to the IP address of the BSC protected interface. Clear
this checkbox to disable NAT.
)
Note: If the BSC managed IP subnet is different from the protected IP subnet and NAT is
not enabled, then you must configure static routes on your network routers to reach the
managed network. These static routes would point to the BSC’s protected interface as
their next “hop.”
See “Configuring the BSC to Assign Fixed IP Addresses” on page 4-14 for more
information about mapping an individual wireless client IP address to a specific device IP
address on the protected side.
Enable multicast
for this interface
Mark this checkbox to enable use of distance vector multicast routing protocol (DVMRP or
PIM-SM) for this interface. You must enable this if you have one or more managed VLANs
that use multicast.
)
Note: When multicast is enabled on an interface, all clients on that interface can send/
receive multicast traffic without bandwidth or firewall restrictions.
Force proxy ARP
for this interface
Mark this checkbox to enable the BSC to force proxy address resolution protocol (ARP)
for traffic directed to clients behind the protected interface. If this checkbox is cleared, the
BSC determines whether the network setup requires proxy ARP. You should enable this
option only when the protected interface and the managed interface reside within the
same IP subnet.
Strict MAC
enforcement of
IP addresses
Mark the checkbox to prevent IP spoofing (users with a different MAC addressing being
able to takeover IP address using ARP poisoning). The BSC will use static ARP entries for
all clients on that VLAN. Note that the BSC will always use static ARP entries for the
following cases, regardless of the checkbox value: Spectralink/Polycom Phones; if
Mobility is enabled; MAC device authentication.
Default Role If not specified, the default role for any interface is the Un-Registered role. In some
environments, you may want all connections on a VLAN to go directly into a Role. To do
Figure 4-6: Completed DHCP Relay Options
This checkbox marked by
default
List DHCP Servers