Setup Suggestions
Hello,
We have T30 device. Our internet coming over a router and entered to the Watchguard External.
We need a configuration steps suggestions for this scenerio;
An internal trusted network with 192.168.1.x, a guest network over an Wireless AP with 10.0.1.x.
0
Sign In to comment.
Answers
Hello,
One way to configure your T30 would be to use separate interfaces for the trusted and guest networks. The AP would then be connected directly to the guest network interface. For example:
eth0 External
eth1 Trusted 192.168.1.x
eth2 Optional 10.0.1.x
The Fireware Help document also has an example of how to deploy an AP by connecting it directly to a Firebox Trusted or Optional network interface:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/wireless/ap_deployment_examples_single_ssid.html
Sincerely,
Juan Nakasone | Support Engineer
WatchGuard Technologies, Inc. | www.watchguard.com
If possible, set up the router in bridge mode so that it is not doing NAT.
If you have a static public IP addr, then you can assign it to your firewall external interface - or if you have a dynamic one, then the firewall external should get the public dynamic one.
Then should you have incoming connections, the router will not be in the way, and you will not be doing double outgoing NAT.
Hello, i did like that but there is not internet connection. Am i miss something?
What do you see in Traffic Monitor ?