User`s guide

Chapter 3

Conﬁguration of the LAN in a ﬁlial oﬃce

For quick conﬁguration of the ﬁlial’s LAN, it is possible to follow similar method as for the

headquarter’s network (see chapter 2). The only diﬀerence is in DNS and DHCP conﬁguration.

Supposing that there is no domain server or any other DNS server in the ﬁlial’s network. The

WinRoute’s DNS module will be used as the primary DNS server.

3.1 Conﬁguration of network interfaces of the Internet gateway

Set a ﬁxed IP address (e.g. 10.1.1.1) at the ﬁrewall’s interface connected to the local network.

Set the same IP address as the primary DNS server (this ensures that also DNS queries from

the local host will be forwarded to the DNS Forwarder — this is important especially in case

that dial-up connection is used). Make sure that no default gateway is set on this interface!

Follow the ISP’s instructions to set the interface connected to the Internet.

3.2 DNS conﬁguration

In Conﬁguration → DNS, keep the default settings (the DNS forwarder service and simple

DNS translation woth the hosts ﬁle and a table of leased addresses are allowed) and set the

advanced options:

• Enter the local DNS domain name — filial.company.com.

• Enable the Use custom forwarding option The settings are addressed in details in chap-

ter 4.2.

• It is recommended to add a record about the server (or about other hosts to which

a ﬁxed IP address will be assigned) to the hosts ﬁle:

10.1.1.1 server

3.3 DHCP Server Conﬁguration

Go to the Conﬁguration → DHCP server section to create an IP scope for hosts to which ad-

dresses will be assigned dynamically (the Add → Scope option). The following parameters must

be speciﬁed to deﬁne address scopes:

• Address range — select 10.1.1.10 - 10.1.1.254 (addresses from 10.1.1.1 to

10.1.1.9 will be reserved for servers and printing machines),

• Network mask — 255.255.255.0

• Default gateway — IP address of the ﬁrewall interface that is connected to the local

network (10.1.1.1).

• DNS server — IP address of the ﬁrewall interface that is connected to the local network

(10.1.1.1 — the same as the default gateway). The WinRoute’s DNS forwarder will be