Athena SWG (Secure Web Gateway)

Athena SWG (formerly Internet Access Gateway) ensures visibility and control across the network, detecting risks like unauthorized access, non-compliant activities, and data leaks to manage endpoints.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
13.0.120
{{sendMatomoQuery("Athena SWG (Secure Web Gateway)","Network Interface Configuration")}}

Network Interface Configuration

{{ $t('productDocDetail.updateTime') }}: 2025-12-29

You can configure network interface information on the Interfaces page in route mode and bridge information in bridge mode.

Configure Network Interfaces in Route mode

Navigate to System > Network > Interfaces. The Interfaces pane is on the right, as shown in the following figure.

Status: indicates the connection status and MTU of a network interface. indicates a connected interface, andP5862#y1indicates a disconnected interface.

Interface: indicates the corresponding physical interface on the device.

Zone: indicates the logical interface area of a network interface. A LAN interface functions as an intranet interface and therefore needs to be added to the LAN. A WAN interface acts as a WAN interface and needs to be added to the WAN. If multiple WAN interfaces are required, apply for multi-line authorization. A DMZ interface functions as an intranet interface. Important servers can be connected to the DMZ, and the firewall settings on the device can restrict the access of intranet users, thereby ensuring the security of the servers.

Type: Indicates the type of a network interface, which can be electrical or optical.

IP Address: Indicates the IP address of a network interface.

MAC Address: Indicates the address of the physical network adapter of a network interface.

MTU: Indicates the MTU of a network interface, which ranges from 700 to 1800. The MTU must be set to at least 1280 if IPv6 is enabled. Otherwise, It will clear the IPv6 addresses.

Mode: Indicates the operating mode of the physical network adapter of a network interface.

Inbound: Indicates the receiving rate of a network interface.

Outbound: Indicates the sending rate of a network interface.

Dialup Log: Indicates the dialup log information about a network interface. The procedure for configuring a network interface is as follows:

On the Interfaces page, click the name of the physical interface. For example, to configure eth0 on the LAN, click eth0. The LAN Interface page is displayed, as shown in the following figure.

An IPv4 or IPv6 address can be configured for the network interface. In IP Address, enter the ID and IP address of each VLAN. The IP address assigned to a VLAN must be idle. If VLAN 2 exists and resides on network segment 10.10.0.0/255.255.0.0, and IP address 10.10.0.1 is not used on the intranet, 2/10.10.0.1/255.255.0.0 can be entered in the IP address list. Add information about other VLANs (802.1q) one by one on different rows.

To configure eth2 on the WAN, click eth2, and the WAN Interface Configuration page is displayed.

If Specified is selected in Address, a fixed IP address assigned by the carrier can be configured for this network interface, or auto-assign can be enabled, depending on the actual situation.

In PPPoE, Internet access is implemented through ADSL dialup. The carrier provides the dialup username and password. Click Advanced and configure dialup attributes in the displayed dialog box.

We recommend you set the handshake time to 20, timeout duration to 80, and maximum timeout times to 3.

In Line Attribute, configure the outbound and inbound bandwidths.

Configure Bridges in Multi-Bridge Mode

Navigate to System > Network > Interface.

Status: Indicates the connection status and MTU of a network interface. indicates a connected interface, andP5896#y1indicates a disconnected interface.

Interface: Indicates the corresponding physical interface on the device.

Zone: Indicates the logical interface area: bridge or management interface.

Type: Indicates the type of a network interface, which can be electrical or optical.

IP Address: Indicates the IP address of a network interface.

MAC Address: Indicates the address of the physical network adapter of a network interface.

MTU: Indicates the MTU of a network interface, which ranges from 700 to 1800. The MTU must be set to at least 1280 if IPv6 is enabled. Otherwise, it will clear the IPv6 addresses.

 

Operating Mode: Indicates the operating mode of the physical network adapter of a network interface.

Inbound: Indicates the receiving rate of a network interface.

Outbound: Indicates the sending rate of a network interface.

To configure a bridge, click its name. The Bridge Configuration page shown in the following figure is displayed. To change the IP address of the default gateway, change it to another IP address on the same segment. Otherwise, you need to change it on the Deployment page.

An IPv4 or IPv6 address can be configured for the bridge. In the IP Address, enter each VLAN's ID and IP address. The IP address assigned to a VLAN must be idle. If VLAN 2 exists and resides on network segment 10.10.0.0/255.255.0.0, and IP address 10.10.0.1 is not used on the intranet, 2/10.10.0.1/255.255.0.0 can be entered in the IP address list. Add information about other VLANs (802.1q) one by one on different rows.

In bridge mode, you can define the management interface—click Interfaces. On the MANAGE Interface page, set the IP address, which can be an IPv4 or IPv6 address.