# Network Interfaces



# Network Interfaces

---

A detailed description of creating and configuring each type of network interface is described in the following instructions:

- [**Local Ethernet**](https://docs.safedns.com/books/45-setup-services/page/configuring-local-ethernet)
- [**External Ethernet**](https://docs.safedns.com/books/45-setup-services/page/configuring-external-ethernet)
- [**Ethernet + PPTP**](https://docs.safedns.com/books/45-setup-services/page/configuring-pptp-connection)
- [**Ethernet + L2TP**](https://docs.safedns.com/books/45-setup-services/page/configuring-l2tp-connection)
- [**Ethernet + PPPoE**](https://docs.safedns.com/books/45-setup-services/page/configuring-pppoe-connection)

All created interfaces are presented in the form of a table:  
[![1. Network Interfaces.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/BZD0qhNPZ0MKhkIw-1-network-interfaces.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/BZD0qhNPZ0MKhkIw-1-network-interfaces.png)

In the edit mode, it becomes possible to change the name, network card (by clicking the pencil button), and configuration settings (manually or automatically):  
[![2. Network Interfaces.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/qxVeWl0XhF448uso-2-network-interfaces.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/qxVeWl0XhF448uso-2-network-interfaces.png)

If the Network card is already in use by any interface, then UTM will display an error window "NIC/VLAN tag combinations must be unique".

<p class="callout info">When migrating UTM from one physical machine to another (disk transfer or backup restore on new hardware), the settings of all network interfaces specified before the migration will be restored. Use the trash bin button to remove unnecessary interfaces.  
**Example**: the original version of UTM 13.X -&gt; migrated UTM to new hardware -&gt; configured new hardware -&gt; upgraded -&gt; in the Network interfaces section, old (before migration) and new (after migration and configuration) network interfaces will be displayed.</p>

# Configuring Local Ethernet

Manual and automatic configuration using the DHCP protocol.

---

<p class="callout danger">Be careful!  
If you select **Local Ethernet** and set it as **External Ethernet**, you will not be able to access the Internet.</p>

---

#### Manual Configuration

To configure the connection in the web interface, follow these steps:

1\. Go to the menu **Services** -&gt; **Network Interfaces**.  
2\. Click on the icon (+) in the upper right corner of the window and select ****Local Ethernet.****[![1. Configuring Local Ethernet.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/xS60bD0giEP7M7as-1-configuring-local-ethernet.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/xS60bD0giEP7M7as-1-configuring-local-ethernet.png)

3\. Select a network card.  
4\. Fill in the fields listed below:

- **Title** - The name you will use to identify the interface in the future. Maximum 42 characters.
- **Network card** - The network adapter that will be used to connect.
- **VLAN tag** - VLAN ID. Such network interface is considered a VLAN interface. Also, one Ethernet interface can be created without specifying VLAN belonging to this network segment that will receive untagged traffic. Regular Ethernet interfaces, without specifying the VLAN ID, are created on the physical interface only in a single copy. The field is filled in only if the network card is already in use.
- **Automatic configuration via DHCP** - It is used if your Internet provider supports the ability to automatically configure the Ethernet interface using the DHCP protocol.
- **IP address/mask** - You can assign multiple IP addresses to the interface. At least one IP address must be specified.
- **Gateway** - Gateway IP address.
- **DNS** - Two fields are available to specify the DNS server (optional).

<p class="callout danger">The **Gateway** field in the Local interface is set only if:  
- There is no External UTM interface;  
- UTM is only used as a proxy.</p>

##### Configuration example:  
[![2. Configuring Local Ethernet.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/thImaKaVKAHqHiEE-2-configuring-local-ethernet.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/thImaKaVKAHqHiEE-2-configuring-local-ethernet.png)  


---

#### Automatic Configuration

It is used if your Internet provider supports the ability to automatically configure the Ethernet interface using the DHCP protocol.

1. Go to menu **Services** -&gt; **Network interfaces.**
2. Click on the icon (+) in the upper right corner of the window and select **Local Ethernet.**
3. Select a network card.
4. Fill in the **Title** field. The **VLAN tag** field is filled in only if the network card is already in use.
5. Enable **Automatic configuration via DHCP**.
6. Make sure that the entered values are correct and click **Save**.

##### Configuration example:  
[![3. Configuring Local Ethernet.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/nbCCFDr7wA51Lw1O-3-configuring-local-ethernet.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/nbCCFDr7wA51Lw1O-3-configuring-local-ethernet.png)  

# Configuring External Ethernet

Manual and automatic configuration using the DHCP protocol.

---

Usually, all necessary information for configuration is contained in the contract with your Internet provider.

---

#### Manual Configuration

To configure the connection in the web interface, follow these steps:

1\. Go to the menu **Services** -&gt; **Network Interfaces**.  
2\. Click on the icon (+) in the upper right corner of the window and select **External Ethernet.**[![1. Configuring External Ethernet.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/8FGzeyY8z5yXXOAd-1-configuring-external-ethernet.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/8FGzeyY8z5yXXOAd-1-configuring-external-ethernet.png)

3\. Select a network card.  
4\. Fill in the fields listed below:

- **Title** - The name you will use to identify the interface in the future. Maximum 42 characters.
- **Network card** - The network adapter that will be used to connect.
- **VLAN tag** - VLAN ID. Such network interface is considered a VLAN interface. Also, one Ethernet interface can be created without specifying VLAN belonging to this network segment that will receive untagged traffic. Regular Ethernet interfaces, without specifying the VLAN ID, are created on the physical interface only in a single copy. The field is filled in only if the network card is already in use.
- **Automatic configuration via DHCP** - It is used if your Internet provider supports the ability to automatically configure the Ethernet interface using the DHCP protocol.
- **IP address/mask** - You can assign multiple IP addresses to the interface. At least one IP address must be specified.
- **Gateway** - Gateway IP address.
- **DNS** - Two fields are available to specify the DNS server (optional).

##### Configuration example:  
[![2. Configuring External Ethernet.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/D94dtEz4woQmXVhD-2-configuring-external-ethernet.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/D94dtEz4woQmXVhD-2-configuring-external-ethernet.png)  


---

#### Automatic Configuration

It is used if your Internet provider supports the ability to automatically configure the Ethernet interface using the DHCP protocol.

1. Go to menu **Services** -&gt; **Network interfaces.**
2. Click on the icon (+) in the upper right corner of the window and select **External Ethernet.**
3. Select a network card.
4. Fill in the **Title** field. The **VLAN tag** field is filled in only if the network card is already in use.
5. Enable **Automatic configuration via DHCP**.
6. Make sure that the entered values are correct and click **Save**.

##### Configuration example:  
[![3. Configuring External Ethernet.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/HUdMcYkFqGGwV8Vp-3-configuring-external-ethernet.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/HUdMcYkFqGGwV8Vp-3-configuring-external-ethernet.png)  

# Configuring  PPTP Connection

Connection via PPTP protocol is used by Internet service providers in order to provide a more reliable authorization.

---

To configure such a connection in the web interface, follow these steps:

1\. Go to the menu **Services -&gt; Network Interfaces.**  
2\. Click on the icon (+) in the upper right corner of the window and select **Ethernet + PPTP**.  
3\. Select a network card.  
4\. Fill in the fields listed in the table below:

<table id="bkmrk-parameter-descriptio" style="width: 104.321%;"><tbody><tr><td style="width: 30.8025%;" width="312">**Parameter**

</td><td style="width: 69.3211%;" width="312">**Description**

</td></tr><tr><td style="width: 30.8025%;" width="312">Title

</td><td style="width: 69.3211%;" width="312">The name you will use to identify the interface in the future. Maximum 42 characters.

</td></tr><tr><td style="width: 30.8025%;" width="312">Network card

</td><td style="width: 69.3211%;" width="312">The network adapter will be used to connect to the Internet provider.

</td></tr><tr><td style="width: 30.8025%;" width="312">VLAN tag

</td><td style="width: 69.3211%;" width="312">The VLAN ID in which UTM will be present. Such network interface is considered a VLAN interface. Fill only in the case a network card is already in use.

</td></tr><tr><td style="width: 30.8025%;" width="312">Automatic configuration via DHCP

</td><td style="width: 69.3211%;" width="312">Used if your Internet provider supports the ability to automatically configure the Ethernet interface using the DHCP protocol.

</td></tr><tr><td style="width: 30.8025%;" width="312">IP address/mask

</td><td style="width: 69.3211%;" width="312">You can assign multiple IP addresses to the interface. At least one IP address must be specified.

</td></tr><tr><td style="width: 30.8025%;" width="312">Gateway

</td><td style="width: 69.3211%;" width="312">Gateway IP address.

</td></tr><tr><td style="width: 30.8025%;" width="312">DNS

</td><td style="width: 69.3211%;" width="312">There are two fields available to specify the DNS server. Optional fields.

</td></tr><tr><td style="width: 30.8025%;" width="312">VPN Server

</td><td style="width: 69.3211%;" width="312">IP address or domain name of the PPTP server.

</td></tr><tr><td style="width: 30.8025%;" width="312">Login

</td><td style="width: 69.3211%;" width="312">Username for the PPTP connection.

</td></tr><tr><td style="width: 30.8025%;" width="312">Password

</td><td style="width: 69.3211%;" width="312">Password for the PPTP connection.

</td></tr></tbody></table>

5\. Make sure the entered values are correct and click **Save**.

##### Configuration example:  
[![1. Configuring PPTP Connection.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/fLn621xGrHrbFFCx-1-configuring-pptp-connection.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/fLn621xGrHrbFFCx-1-configuring-pptp-connection.png)  

# Configuring L2TP Connection

Connection via L2TP protocol is sometimes used by Internet service providers in order to provide more reliable authorization.

---

To configure such a connection in the web interface, follow these steps:

1. Go to menu **Services -&gt; Network Interfaces.**
2. Click on the icon (+) in the upper right corner of the window and select **Ethernet + L2TP.**
3. Select a network card.
4. Fill in the fields listed in the table below:

<table id="bkmrk-parameter-descriptio" style="width: 117.037%;"><tbody><tr><td style="width: 28.7038%;" width="312">**Parameter**

</td><td style="width: 71.4198%;" width="312">**Description**

</td></tr><tr><td style="width: 28.7038%;" width="312">Title

</td><td style="width: 71.4198%;" width="312">The name you will use to identify the interface in the future. Maximum 42 characters.

</td></tr><tr><td style="width: 28.7038%;" width="312">Network Card

</td><td style="width: 71.4198%;" width="312">The network adapter will be used to connect to the Internet provider.

</td></tr><tr><td style="width: 28.7038%;" width="312">VLAN tag

</td><td style="width: 71.4198%;" width="312">The VLAN ID in which UTM will be present Such network interface is considered a VLAN interface. Fill in only if the network card is already in use.

</td></tr><tr><td style="width: 28.7038%;" width="312">Automatic configuration via DHCP

</td><td style="width: 71.4198%;" width="312">Used if your Internet provider supports the ability to automatically configure the Ethernet interface using the DHCP protocol.

</td></tr><tr><td style="width: 28.7038%;" width="312">IP address/mask

</td><td style="width: 71.4198%;" width="312">You can assign multiple IP addresses to the interface. At least one IP address must be specified.

</td></tr><tr><td style="width: 28.7038%;" width="312">Gateway

</td><td style="width: 71.4198%;" width="312">Gateway IP address.

</td></tr><tr><td style="width: 28.7038%;" width="312">DNS

</td><td style="width: 71.4198%;" width="312">Two fields are available to specify the DNS server (optional).

</td></tr><tr><td style="width: 28.7038%;" width="312">VPN Server

</td><td style="width: 71.4198%;" width="312">IP address or domain name of the L2TP server.

</td></tr><tr><td style="width: 28.7038%;" width="312">Username

</td><td style="width: 71.4198%;" width="312">User name for the L2TP connection.

</td></tr><tr><td style="width: 28.7038%;" width="312">Password

</td><td style="width: 71.4198%;" width="312">Password for the L2TP connection.

</td></tr></tbody></table>

5. Make sure that the entered values are correct and click **Save**.

##### Configuration example:  
[![1. Configuring L2TP Connection.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/5oZMX3203tWeQQgx-1-configuring-l2tp-connection.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/5oZMX3203tWeQQgx-1-configuring-l2tp-connection.png)  

# Configuring PPPoE Connection

Connection via PPPoE protocol is traditionally used by providers offering connection via xDSL.

---

To configure the connection in the web interface, follow these steps:

1. Go to menu **Services -&gt; Network Interfaces.**
2. Click on the icon (+) in the upper right corner of the window and select **Ethernet + PPPoE**.
3. Select a network card.
4. Fill in the fields listed in the table below:

<table id="bkmrk-parameter-descriptio" style="width: 106.914%;"><tbody><tr><td style="width: 23.8543%;" width="312">**Parameter**

</td><td style="width: 76.1457%;" width="312">**Description**

</td></tr><tr><td style="width: 23.8543%;" width="312">Title

</td><td style="width: 76.1457%;" width="312">The name you will use to identify the interface in the future. Maximum 42 characters.

</td></tr><tr><td style="width: 23.8543%;" width="312">Network card

</td><td style="width: 76.1457%;" width="312">The network adapter will be used to connect to the Internet provider.

</td></tr><tr><td style="width: 23.8543%;" width="312">VLAN tag

</td><td style="width: 76.1457%;" width="312">The VLAN ID in which UTM will be present Such network interface is considered a VLAN interface. Fill in only if the network card is already in use.

</td></tr><tr><td style="width: 23.8543%;" width="312">Login

</td><td style="width: 76.1457%;" width="312">Username for PPPoE connection.

</td></tr><tr><td style="width: 23.8543%;" width="312">Password

</td><td style="width: 76.1457%;" width="312">Password for PPPoE connection.

</td></tr><tr><td style="width: 23.8543%;" width="312">Service

</td><td style="width: 76.1457%;" width="312">Service ID. If you don't know what to enter, leave the field empty.

</td></tr><tr><td style="width: 23.8543%;" width="312">Access concentrator (Hub)

</td><td style="width: 76.1457%;" width="312">Hub ID. If you don't know what to enter, leave the field empty.

</td></tr></tbody></table>

5. Make sure the entered values are correct and click **Save**.

##### Configuration example:  
[![1. Configuring PPPoE Connection.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/KL7wfwyRtaSJcAwE-1-configuring-pppoe-connection.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/KL7wfwyRtaSJcAwE-1-configuring-pppoe-connection.png)  

# Connection via 3G and 4G

To connect to the networks of mobile operators, it is possible to use 4G routers with Ethernet interfaces.

---

The server also supports some models of USB modems, for example, Huawei E8372. When connected, the USB modem will be displayed in SafeUTM as a new Ethernet interface.