Setting the
Public Interface
Use the Configuration | Interfaces | Ethernet 2 menu options
to get to the screen, as shown in Figure 14-13. Select Static IP Addressing, and then
enter the IP address and the appropriate mask. This same screen allows making
choices on interface speed, full- or half-duplex, MTU size, fragmentation
preferences, and whether the interface can be a DHCP client.
Check the DHCP Client check box if it’s necessary to obtain the IP
address, the subnet mask, and the default gateway for this interface via DHCP
from an ISP. This would be more common at a branch location or any small client
that doesn’t require permanent static IP addresses for shared servers. If this
check box is selected, don’t make entries in the IP address and subnet mask
fields that follow.
To make this interface a public interface, check the Public
Interface check box designating the interface is part of a public network, such
as the Internet. A public interface must be configured before you can configure
NAT and IPSec LAN-to-LAN. Designate only one VPN Concentrator interface as a
public interface.
Notice the tabs on this screen would allow configuring RIP, OSPF,
and Bandwidth Management features. While static routes are common with
Concentrators, some LAN-to-LAN features, such as Network Autodiscovery, require
or can take advantage of this support.
Clicking the Apply button applies the choices and returns to
the Configuration | Interfaces screen, which confirms the new IP address and
mask.