The address of the firewall's external network (business, plant LAN, DMZ) port can act as a DHCP client and can be assigned by the site's DHCP server or it can be set to a static address by the firewall administrator. This address will be the gateway address to the firewall's routing function. It is used when providing network routing information to configure external routes or to manually update the computer routing table using the route add command. Emerson recommends that you give the firewall a static IP address without DNS information. When a firewall with static IP addressing is rebooted, its IP address persists; the DHCP server does not give it a different IP address. This ensures that the routing information configured for the external workstations remains correct. Correct routing information is required for the external workstations to communicate with internal workstations across the firewall.
Consult with your IT department and obtain the following information required to configure the firewall's external network for static IP addressing. We recommend that you record this information on the Worksheet for Smart Firewall Configuration and record the external workstation names and IP addresses on the Worksheet for external workstation names and IP addresses.
Emerson strongly recommends that DNS addresses are not used. This prevents users from entering a URL address in an internet browser on a DeltaV workstation and accessing the internet.
For the Smart Firewall this is the same address as the external network address. This is also the address used as the gateway parameter in the route add command.
When you have gathered all the necessary information and completed the worksheet, you are ready to configure the external network.