1-888-77-Kerio
Home » Categories » Kerio Control » Interfaces
Icon Printer Icon Email      Icon Twitter Icon Digg Icon Stumbleupon Icon de.icio.us Icon FaceBook

Configuring network interfaces

Overview

Kerio Control represents a gateway between two or more networks (typically between the local network and the Internet) and controls traffic passing through network adapters which are connected to these networks.

In Kerio Control, you can define the following groups of interfaces:

  • Internet Interfaces — interfaces which can be used for Internet connection,

  • Trusted/Local Interfaces — interfaces connected to local private networks protected by the firewall,

  • IPsec and Kerio VPN interfaces — virtual network interfaces (Kerio VPN, IPsec VPN),

  • Guest Interfaces — interfaces which can be used for Guest LANs. See Configuring guest networks, for more information.

  • Other Interfaces — interfaces which do not belong to any of the groups listed above (i.e. dial-like links).

If you want to configure WiFi in your Kerio Control NG100W or NG300W, see Managing WiFi in Kerio Control NG100W and NG300W.

Adding new interfaces

Interfaces in Kerio Control represents:

  • Network adapter — Each new network adapter in the Kerio Control computer displays as an interface in the Interfaces section.

    If you use a Kerio Control Software Appliance, you must put a new network adapter (NIC) to the Kerio Control computer.

    If you use a Kerio Control Virtual Appliance, you must create a new network adapter in your Hyper-V or VMware environment.

  • Port in Kerio Control Box — In the Interfaces section displays LAN switch interface. You can take a port from the switch and make it a standalone interface from the port.

  • VLAN — If your network architecture is built on VLANs, you can add VLANs as interfaces.

Configuring interfaces

A configuration wizard is available for the setup of basic interface parameters:

  1. In the administration interface, go to Interfaces.

  2. Click More Actions → Configure in Wizard.

  3. Read the Configuration Assistant article.

During the initial firewall configuration by the wizard, interfaces will be arranged into groups automatically. This classification can be changed later.

To configure interfaces directly in the Interfaces section, see Configuring TCP/IP settings in Kerio Control interfaces.

Moving an interface to another group

To move an interface to another group, drag it by mouse to the desired destination group, or select the group in the properties of the particular interface — see below.

Configuring Internet connectivity

For networks using IPv4, it is possible to use one or more Internet connections.

  1. In the administration interface, go to Interfaces.

  2. Select one of the following options:

    • A Single Internet Link — the most common connection of local networks to the Internet. In this case, only one Internet connection is available and it is used persistently. It is also possible to use dial-like links which can be connected persistently — typically PPPoE connections.

      Only a single link connection is for IPv6.

    • Multiple Internet Links - Failover — if the primary link fails, Kerio Control switches to the secondary link automatically. When the connection on the primary link is recovered, Kerio Control automatically switches back to it.

    • Multiple Internet Links - Load Balancing — Kerio Control can use multiple links concurrently and spread data transferred between the LAN and the Internet among these links. In standard conditions and settings, this also works as connection failover — if any of the links fails, transferred data are spread among the other links.

  3. Click Apply.

Adding tunnels

You can add an interface for a new type of tunnel:

Configuring Ethernet ports

Hardware appliance Edition

Kerio Control hardware appliance contains Gigabit Ethernet ports. Individual ports can be set as:

  • Standalone interface

  • Switch for LAN

  • Not assigned — the port is inactive.

It is also possible to use a virtual network (VLAN).

  1. In the administration interface, go to Interfaces.

  2. Click Manage Ports.

  3. In the Manage Ports dialog, double-click Port Name.

  4. In the Configure Port dialog, you can set a port as:

    • Standalone interface — the port is used as a standalone Ethernet interface.

    • Switch for LAN — port is a part of the switch which, in Kerio Control, behaves as one Ethernet interface.

    • Not assigned — the port is inactive. This can be used for example for temporary disconnection of the computer of a network segment connected to the port.

  5. Speed and duplex leave as it is.

  6. On Ethernet interfaces, you can create one or more tagged virtual networks (VLAN).

  7. Save the settings.

Appliance Editions

Appliance editions can set speed and duplex mode for Ethernet interfaces and create virtual networks (VLAN) on these interfaces:

  1. In the administration interface, go to Interfaces.

  2. Click Manage Ports.

  3. In the Manage Ports dialog, double-click Port Name.

  4. Set Speed and duplex.

    In most cases, interconnected devices agree on speed and communication mode automatically.

  5. On Ethernet interfaces, you can create one or more tagged virtual networks (VLAN).

  6. Save the settings.

Physical interfaces (ports) cannot be added to the LAN switch. This functionality is available only in the hardware appliance edition.

Related articles

Managing WiFi in Kerio Control NG100W and NG300W.

Configuring WiFi guest networks in Kerio Control NG100W and NG300W.

Wireless bridging on Kerio Control NG100W and NG300W.

Configuring TCP/IP settings in Kerio Control interfaces

Configuring VLANs

Configuring IPv6 networking in Kerio Control

Configuring Kerio VPN tunnel

Configuring IPsec VPN tunnel

Configuring L2TP tunnel

Configuring PPTP tunnel

Configuring PPPoE connections

Changing the MTU of network interfaces

Changing MAC addresses of network interfaces

Changing the speed and duplex of Ethernet interfaces


comments powered by Disqus