Meetinghouse Firewall Upgrade Warning

Last Updated: 12 December 2017 at 21:24

Upgrading a Meetinghouse Firewall yields several benefits, but it also makes changes to the IP addresses used for the meetinghouse network. Please read through the following information to understand these changes and to take any necessary actions.  Ignoring this information may result in some devices on the meetinghouse network not working properly after the upgrade.

If the meetinghouse contains an official Family History Center or other co-located Church entity (such as a Facilities Management Office or Mission Office), then DO NOT PROCEED unless authorized by the Global Service Center (GSC).  Contact the Global Service Center (GSC) at +1 855-537-4357 or dial the toll-free number for your area.

Meetinghouse Firewalls being upgraded to the new configuration will receive a new IP address range for the User Zone (also known as the Public Network).  Where it used to use 10.x.x.x addresses, after the upgrade it will use 192.168.x.x addresses. This means that any devices with statically assigned IP addresses will need to be changed to use IP addresses in the new static IP address range or to obtain IP addresses automatically in order for them to work correctly.  Network printers and servers usually use static IP addresses.  Clerk computers should be checked to make sure they are set to obtain IP addresses automatically or use a static IP address in the new static IP address range.  The Public Network will now support 990 dynamic addresses and 31 static addresses.

Meetinghouse Firewalls activated prior to August 13, 2014 were not automatically configured with a Facilities Zone, though a Facilities Zone could have been added by contacting the GSC.  Firewalls activated on or after August 13, 2014 and those that go through this upgrade process will automatically have a port assigned to the Facilities Zone (usually port 3, except in the case of the C891F which uses port 7).  The Facilities Zone is not designed for any connections other than Internet-enabled appliances (IEAs) such as air conditioning systems and remote door lock systems.  Even if there are no IEAs in a meetinghouse, this port is now always configured for this purpose.  After the upgrade, any non-IEA devices (such as computers or wireless access points) connected to the Facilities Zone will no longer work. Please make sure all non-IEA devices are plugged into the User Zone (also known as the Public Network) and not the Facilities Zone.

Visit Technology Manager at tm.lds.org to see which zones are assigned to which ports and for the ranges of static and dynamic IP addresses available.