From UntangleWiki

All Networking Topics | Untangle Server User's Guide

Contents 1 Determining Status of Network Connections 2 Swapping Network Interfaces 3 Adding Network Cards 4 Removing Network Cards 5 Testing Internet Connection 6 Ping Test 7 Configuring Untangle Server's Interfaces (Advanced Mode) 8 Creating NAT Policies (Advanced Mode) 9 Routing Traffic To Untangle Server From Another External Network (Advanced Mode) 10 Modifying Data Transfer Mode 11 Related Topics 12 Networking FAQs

Determining Status of Network Connections

An external and internal interface are required for your Untangle Server to function correctly. Optionally, you can install a DMZ interface.

1. From the Navigation pane, choose Config > Networking.
2. Click the Interfaces tab. The Physical Interface column lists the status for each network card.

• Some interfaces may report unknown if they are working but cannot detect a signal in software properly.
• If a MAC address is listed, then a network card is installed. If you want to add a network card, go to Adding Network Cards.
• If the interface indicates connected, then the interface has a network connection. Otherwise, the interface indicates disconnected. If you want to fix a network connection, go to Testing Internet Connection.

Top

Swapping Network Interfaces

1. From the Navigation pane, choose Config > Networking.
2. Click the Interfaces tab.
3. Drag and drop the Mac addresses for the interfaces that you want to swap.

Top

Adding Network Cards

1. Physically install the network card.
2. Log on to the Untangle Server, and choose Config > Networking.
3. Click the Interfaces tab. The network card that you just installed does not appear in the list of interfaces.
4. Click Refresh.
• If the Untangle Server detects that you installed a network card, a message appears as shown in as shown in Figure, Installing Interfaces: Interface Change Detected.


Figure, Installing Interfaces: Interface Change Detected
• If the Untangle Server does not detect that you installed a network card, a message appears as shown in Figure, Installing Interfaces: No Interface Change Detected.


Figure, Installing Interfaces: No Interface Change Detected
5. Click Save.
6. Return to the Interfaces tab. The network card that you installed now appears in the list of interfaces.

Top

Removing Network Cards

1. Physically remove the network card.
2. Log on to the Untangle Server, and choose Config > Networking.
3. Click the Interfaces tab. The network card that you just removed still appears in the list of interfaces.
4. Click Refresh.
• If the Untangle Server detects that you removed a network card, a message appears as shown in Figure, Removing Interfaces: Interface Change Detected.


Figure, Removing Interfaces: Interface Change Detected
• If the Untangle Server does not detect that you removed a network card, a message appears as shown in Figure, Installing Interfaces: No Interface Change Detected.


Figure, Removing Interfaces: No Interface Change Detected
5. Click Save.
6. Return to the Interfaces tab. The network card that you removed no longer appears in the list of interfaces.

Top

Testing Internet Connection

1. From the Navigation pane, choose Config > Networking.
2. Click the Interfaces tab.
3. Click on the Test Connectivity button. If successful a message appears as shown in Figure, Testing Internet Connection.

Figure, Testing Internet Connection

Top

Ping Test

1. From the Navigation pane, choose Config > Networking.
2. Click the Interfaces tab.
3. Click on the Ping Test button. A window opens as shown in Figure, Ping Test.
4. Enter the IP address or website URL that you wish to ping and click the Run Test button. The results of the ping test will be shown in the window.

Figure, Ping Test

Configuring Untangle Server's Interfaces (Advanced Mode)

This topic is for Advanced Mode only. If you are in Standard Mode, go to Configuring Untangle Server's External IP Address (Standard Mode). To learn about the differences between these modes, go to Network Configuration Modes.

1. From the Navigation pane, choose Config > Interfaces.
2. Click the Edit link for the interface that you want to configure.


Figure, Configuring Interfaces in Advanced Mode
3. Click the Add (+) button. A new row appears in the table.
4. From the Config Type drop-down list, select how you want the interface to obtain its IP address:
   

   Static	If selected, you must manually set the IP Address and Netmask. Configure the network settings as you would for any system on the network. Default Route (sometimes referred to as a gateway), primary DNS server and, optionally, a secondary DNS server are only configurable on the external interface.
   Dynamic	If selected, the Untangle Server uses the DHCP server to obtain network settings and displays them in the Current column. You can override these settings using the Override column. You can request a renewal of the DHCP Lease via the Renew DHCP Lease button.
   Bridge	If selected, bridges any two interfaces. A common use is when you want to bridge the Untangle Server's DMZ interface to the Untangle Server's external interface. It's not uncommon for the DMZ to have an internal IP address; in fact, the main reason you might want to bridge the DMZ to the External is so that you don't need to assign the DMZ its on external IP addresses. In this case, Config Type is bridge, and Bridge To is External (static).
   PPPoE	If selected, you've identified that your Internet Server Provider uses PPPoE for authentication—to authorize you to connect to the Internet. PPPoE is supported on the external interface for users connecting to their ISP via PPPoE. Select the use peer DNS check box to use your ISP's DNS servers when the PPPoE connection is establised. You can request a renewal of the DHCP Lease via the Renew DHCP Lease button. If you have PPPoE questions, go to PPPoE FAQs.

5. (Optional/Internal Interface) Specify NAT policies.
6. (External/Internal Interfaces) To increase network performance, specify a MTU for the interfaces. This setting is not available for PPPoE configuration type.
7. Change the transmission rate/mode. The default is auto or autonegotiation.
8. Click Save.
9. Test the Internet connection.

Top

Creating NAT Policies (Advanced Mode)

For every source address that you specify, you must first assign these public IP addresses to the Untangle Server as outlined in Routing Traffic To Untangle Server From Another External Network (Advanced Mode).

There are a few reasons why you might want to create a NAT policy:

• Sending mail. Since the volume of mail per IP address is an important metric, have the mail server use a different IP address than the rest of the users to reduce the amount of outbound mail that gets marked as spam.
• Logging. You might want to separate the external behavior of some group of users from another group.

1. From the Navigation pane, choose Config > Networking > Interfaces.
2. Click the Edit for the internal interface.
3. Specify the IP address of the Internal Interface and the Source Address, then click Save.

For example, let's assume your Untangle Server has an internal interface with IP address and netmask of 192.168.1.102/32. Let's also assume that your Untangle Server has three external IP address:

• 1.2.3.1
• 1.2.3.2
• 1.2.3.3

If you want the packets for the internal network to appear to come from 1.2.3.2, add a NAT policy for 192.168.1.102/32 with a Source Address of 1.2.3.2.

• By default the Source Address is auto, which means packets will go out the primary (first) IP address. In this case, 1.2.3.1 is the primary (first) IP Address, so by default all traffic appears (on the Internet) to come from that address, having a Source Address of 1.2.3.1.
• Auto also means NAT is enabled as opposed to just passing through the internal addresses, which won't work for most network configurations, especially cable/DSL.

Routing Traffic To Untangle Server From Another External Network (Advanced Mode)

This topic is for Advanced Mode only. If you are in Standard Mode, go to Routing Traffic To Untangle Server From Another External Network (Standard Mode).

For more complex deployments:

• If your the Untangle Server is a bridge, you can create an external address alias to allow the Untangle Server to route traffic for a network other than the network that is defined by the Untangle Server's external IP address.

• If the Untangle Server is a router, you can create an external address alias to allow the Untangle Server to receive traffic for more than just the network of the Untangle Server's external interface.

• If you want to create a NAT policy as outlined in Configuring Untangle Server's Interfaces (Advanced Mode), each source address must be assigned to the Untangle Server.

1. From the Navigation pane, choose Config > Networking.
2. Click the Interfaces tab.
3. Click the Edit link for the external interface. A new window launches.
4. Click the plus (+) button. A new row appears in the table.
5. In the new row, specify the address and netmask of the additional external network. Express the netmask as a CIDR prefix.
6. Click Save.

Top

Modifying Data Transfer Mode

You cannot change the speed at which network interfaces send data over the network—the Half/Full Duplex and 10/100 settings. The speed is set at 100 Mb/s full-duplex and cannot be turned off.

When interfacing with old hardware, you might need to downgrade a given port from its default Auto-Negotiate setting to a more limiting setting. However, networking hardware that requires a transfer rate limitation (100/10 Mbps) or that cannot auto-negotiate has not been readily available for several years, so Untangle Server doesn't want to clutter your interface if there is no benefit.

Top

Related Topics

• About Untangle Server's Network Interfaces
• Less Trusted vs. More Trusted Interfaces
• Configuring Untangle Server's External IP Address (Standard Mode)
• Specifying Untangle Server's Public (Internet) Address
• Determining Untangle Server's Internal IP Address
• Determining Untangle Server's External IP Address
• Networking and Web Address Syntax

Top

Networking FAQs