Indecision we're going through 1:48 inept robbed mode and basically doing topic wrap up.
So we've seen that in this configuration that we have just finished the fourth grade.
Is this thought as a gateway or router between a private network and the Internet and by using that
the floodgate is able to hide the IP address of the private network.
Let's take a look again at the diagram
so this is a diagram we have we have worked on.
So we have the fort again in the middle.
It sits between internet connection internet order and the the land segment the internal network.
So it receives packets of providing DHV services or maybe you have static connectivity static IP connectivity.
That's a matter in receiving the packets then it translates the source IP address that will be wanting
to 168 got 1.0 packet from the PC.
This is the fourth address and it will translate this address to 170 to 27 but to that 155 and sending
back it up.
So this is basically running the firewall in that route.
Let's take a look again at the web interface though some are some small changes configuration.
Apply them and then we'll move to the next section.
So we're back to the graphical user interface.
Let's log in the username password.
It's admin for both
to play longer this time.
But anyway we have phone have locked into the into the console the web console.
Let's take a look.
For example two network interfaces.
One thing that we haven't done so far it's putting some labels that we've also had functionality.
We'll talk about it later on in the Morning Passport we say.
So the rule being that the web interface forceable we see that it's manual.
So it's that the IP address is configured that it has to have a role.
Now it's undefined.
So we'll just put it as one web interface Conexion an estimated benice are use to estimate when utilization.
Let's say we have 1 gig.
So this is one leg and one gig for us.
And the same for downstream
it's when it's physical interface it's up the status of course it's enabled and we just hit OK.
Moving to the second interface the LAN interface port to obviously will have to change the road from
undefine to something that makes sense.
And this is where we have configured LAN we can also put an alias.
So kind of off label but that's that's not really necessary to do a recap we have configured the server
we have the starting IP and the end I this will be the IP pool that's available for Gateway.
Same interface.
What does this have to do with our configuration.
Well when they should be the back it comes right it will have to provide several things to talk to the
requesting PC and this is the IP address the gateway and also the DNS service services.
And this deal before it means that it will be provided that the forgetable be its IP address.
And this is one that one the same for billions and hit OK.
Something else no doubt is the DNS service.
So the DNS services body full when firing up when starting up were you with any Forty-Eight firewall
it has by default the 14th got.
If this doesn't make any sense to you or you want to use different ones for whatever reason you can
just click specify and configure a room with your own.
I don't know working the NSA from your own environment.
It doesn't matter.
It doesn't make any sense for me to change them or leave them by default.
I just want to make a note of them.
Next I want to show you what is the setting routes.
So we have connectivity because we have said we have a default route and the gateway or default gateway
is the Internet Service Provider the ISP and the interfaces.
Pt. 1.
You can also obviously create new routes and you wrote more specific routes so not default one maybe
towards another another interface different from the ISP one.
The web interface
last thing and we will close this session is the policy argue for policy reasons is where we have configured
the policy and now we can see that our first policy or not the implicit one the nice traffic the net
need to rely on if we go and it is this policy support too has changed now.
And we also see that we have role there but it's a LAN interface and 12:56 it's it's where.
So everything is fine.
It's fine it's functional.
Last thing to note is how do we say that things are are working.
We have seen them working but how do we see cessions being established.
We're going to for you go into all sessions
we can now we have to we have to do some age's traffic to load some traffic so that it can be analyzed.
The network is functioning and now we are looking at the traffic being hit here.
And yes we have some we have traffic being logged.
This is obviously Google.
And as you said so far several times and other traffic that has been locked here.
This is the policy the internal and policy we can see application bite and very important source sourcing
interface face this nation this nation interface and so on.
So hopefully this is this is useful information to.
This information can become useful in any moment that you want to troubleshoot something you maybe are
having packages that are that are not making through maybe or having packets that are dropped and this
is the way to see how is the session a lot.
Does it hit any policy which policy does it.
And then it really makes sense to get used to to taking a look at the 40 view and all stations that.