Question

what will you do if you are deploying IP address​

Answer 1

QUESTION:—

What will you do if you are deploying IP address ?

ANSWER:—

Companies with advanced network configurations can configure multiple IP addresses on the appliance’s ethernet ports. Using multiple ports can enhance security or enable connections over non-standard networks. For example, if employees are restricted from accessing the internet but need to provide off-network support, using one port for your internal private network and another for the public internet allows users worldwide to access systems without breaching your network security policies.

NIC teaming combines your system's physical network interface controllers (NICs) into a single logical interface. NIC teaming operates in "Active-Backup" mode. One of the NICs is used to carry all network traffic. If the link on that NIC is lost for any reason, the other NIC becomes active. Before activating NIC teaming, please ensure that both NICs are connected to the same network segment (subnet) and that you have IP addresses configured on only one of the existing NICs.Although multiple IP addresses can be assigned to each NIC, do not configure either NIC such that it has an IP address that is in the same subnet as an IP address on the other NIC. In this scenario, packet loss occurs with packets originating from the IP on the NIC that does not have the default gateway. Consider the following example configuration:

eth0 is configured with the default gateway of 192.168.1.1

eth0 is assigned with 192.168.1.5

eth1 is assigned with 192.168.1.10

Both eth0 and eth1 are connected to the same subnet switch

Given this configuration, traffic from both NICs are sent to the default gateway (192.168.1.1) regardless of which NIC received traffic. Switches configured with dynamic ARP send packets randomly to either eth0 (192.168.1.5) or eth1 (192.168.1.10), not both. When eth0 receives these packets from the switch destined for eth1, eth0 drops the packets. Some switches are configured with static ARP. These switches drop all packets received from eth1 since this NIC does not have the default gateway and is not present in the static ARP table of the gateway. If you wish to configure redundant NICs on the same subnet, us e NIC teaming.

By default, Dynamic Host Configuration Protocol (DHCP) is enabled for your appliance. DHCP is a network protocol that uses a DHCP server to control the distribution of network parameters, such as IP addresses, allowing systems to automatically request these parameters. This reduces the need to manually configure settings. In this case, when checked, an IP address is obtained from the DHCP server and is removed from the pool of available IP addresses.

To learn more about DHCP, please see Dynamic Host Configuration Protocol (DHCP).

NIC Configuration Details

Click Show Details to view and verify transmission and reception statistics for each ethernet port on the appliance.

Global Network Configuration

Under the Global Network Configuration section, configure the hostname for your Secure Remote Access Appliance.

The hostname field does not need to meet any technical requirements. It does not affect what hostname client software or remote users connect to. (To make these changes, see /login > Status > Information > Client Software Is Built to Attempt. If the hostname attempted by the client software needs to change, notify BeyondTrust Technical Support of the needed changes so that Support can build a software update.) The hostname field exists primarily to help you distinguish between multiple Secure Remote Access Appliances. It is also used as the local server identifier when making SMTP connections to send email alerts. This is useful if the SMTP Relay Server specified at /appliance > Security > Email Configuration is locked down. In this case, the configured hostname might have to match the reverse-DNS lookup of the appliance's IP address.

Assign a default gateway, selecting which ethernet port to use. Enter an IP address for one or more DNS servers. If DHCP is enabled, the DHCP lease provides you with a default gateway as well as a listing of DNS servers in order of preference. Any statically configured DNS servers listed in the Custom DNS Servers field are attempted to be reached first, followed by DNS servers received from DHCP. In the event that these local DNS servers are unavailable, the Fallback to OpenDNS Servers option enables the Secure Remote Access Appliance to use publicly available DNS servers from OpenDNS. For more information about OpenDNS, visit www.opendns.com.

Allow your appliance to respond to pings if you wish to be able to test if the host is functioning. Set the hostname or IP address for a Network Time Protocol (NTP) server with which you wish your Secure Remote Access Appliance to synchronize.