Edit physical interfaces

To edit a physical interface, do as follows:

  1. Configure General settings.
    • Name: Enter a name. You can change this name later. You can use a maximum of 58 characters.
    • Hardware: A physical interface, for example, Port1, PortA, or eth0. You cannot change this later.
    • Network zone: Zone assigned to the interface.
  2. Configure IPv4 or IPv6 settings.

    IPv4 settings:

    TypeDescription

    Static

    Specify the IP address.

    IPv4/netmask: IPv4 address and subnet mask.

    Gateway detail: Gateway through which traffic is to be routed.

    PPPoE

    Obtain an IP address from a PPPoE server.

    Preferred IP: Preferred IP address for the PPPoE connection. Many internet service providers assign a static IP address to PPPoE connections. The firewall allows you to bind the static IP address to the PPPoE connection.
    Note An address other than the preferred IP address may be assigned to the PPPoE connection, depending on the PPPoE server configuration.

    Gateway detail: Gateway through which traffic is to be routed.

    Username: PPPoE account username.

    Password: PPPoE account password.

    Access concentrator/service name: Access concentrator and service name. The firewall initiates only those sessions with the access concentrator that can provide the specified service.

    LCP echo interval: Time, in seconds, that the system must wait before it sends an echo request to check whether the link is alive. Once an attempt is made, the firewall waits for the defined time interval before the next attempt is made.

    LCP failure: Number of attempts (echo requests) made. Once the specified number of attempts are made without receiving a response from the client, the firewall disconnects the PPPoE connection.

    Schedule time for reconnect: The address assigned to a PPPoE connection, whether dynamic or static (preferred), can have a predefined validity period. Once the validity expires, the PPPoE connection is terminated and is reconnected. To prevent reconnection during working hours, enable the PPPoE reconnect schedule.

    On reconnection, an address other than the preferred IP address (if specified) may be assigned to the PPPoE connection.

    DHCP

    Obtain an IP address from a DHCP server.

    Gateway detail: Gateway through which traffic is to be routed.

    IPv6 settings:

    TypeDescription

    Static

    Specify the IP address.

    IPv6/prefix: IPv6 address and prefix.

    Gateway detail: Gateway through which traffic is to be routed.

    DHCP

    Obtain an IP address from a DHCP server.

    Mode: You can configure IPv6 address assignment using stateful or stateless methods.
    • Auto: Configure the IPv6 address using DHCPv6 or Stateless Address Auto-Configuration (SLAAC) according to the Managed (M) Address Configuration and Other (O) Configuration flags advertised in the Router Advertisement (RA) message.
    • Manual: Configure the IPv6 address using DHCPv6 or SLAAC according to the options specified. Using DHCP only, the client will configure the address and other parameters using the DHCPv6 server. Using Stateless, the client will configure the address using SLAAC based on the advertised RA message. You can select Accept other configuration from DHCP to configure other parameters using the DHCPv6 server.
    DHCP rapid commit: Configure the interface using a two-message exchange (solicit and reply) rather than a four-message exchange (solicit, advertise, request, and reply). This option provides faster client configuration.
    Note Rapid commit must be enabled on the DHCPv6 server.

    Gateway detail: Gateway through which traffic is to be routed.

  3. Optional Configure Advanced settings.
    • Interface speed: Interface speed for synchronization.
      Note Speed mismatch between the device and third-party routers and switches may result in errors or collisions, disconnection, increased latency, or slow performance.
    • MTU: MTU (Maximum Transmission Unit) value, in bytes. It's the largest packet size that a network can transmit. Packets larger than the specified value are divided into smaller packets before they are sent.
    • Override MSS: MSS (Maximum Segment Size), in bytes. It's the amount of data that can be transmitted in a TCP packet.
    • Use default MAC address: Use the default MAC address of the interface. By default, the first port that is included as member port becomes the default MAC address.
    • Override default MAC address: Override the default MAC address of the interface and enter a new address. On factory reset, the address will be reset to the default MAC address.
    • DAD attempts: Number of consecutive Neighbor Solicitation messages sent while performing Duplicate Address Detection (DAD) on a tentative address.
    • Allowed RA servers: Remote access servers allowed to connect using the interface.
  4. Click Save.