Setup Suggestions

Hello,

We have T30 device. Our internet coming over a router and entered to the Watchguard External.

We need a configuration steps suggestions for this scenerio;

An internal trusted network with 192.168.1.x, a guest network over an Wireless AP with 10.0.1.x.

Answers

  • Juan_NakasoneJuan_Nakasone WatchGuard Representative

    Hello,

    One way to configure your T30 would be to use separate interfaces for the trusted and guest networks. The AP would then be connected directly to the guest network interface. For example:

    eth0 External
    eth1 Trusted 192.168.1.x
    eth2 Optional 10.0.1.x

    The Fireware Help document also has an example of how to deploy an AP by connecting it directly to a Firebox Trusted or Optional network interface:

    https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/wireless/ap_deployment_examples_single_ssid.html

    Sincerely,

    Juan Nakasone | Support Engineer
    WatchGuard Technologies, Inc. | www.watchguard.com

  • If possible, set up the router in bridge mode so that it is not doing NAT.
    If you have a static public IP addr, then you can assign it to your firewall external interface - or if you have a dynamic one, then the firewall external should get the public dynamic one.
    Then should you have incoming connections, the router will not be in the way, and you will not be doing double outgoing NAT.

  • @Juan_Nakasone said:
    Hello,

    One way to configure your T30 would be to use separate interfaces for the trusted and guest networks. The AP would then be connected directly to the guest network interface. For example:

    eth0 External
    eth1 Trusted 192.168.1.x
    eth2 Optional 10.0.1.x

    The Fireware Help document also has an example of how to deploy an AP by connecting it directly to a Firebox Trusted or Optional network interface:

    https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/wireless/ap_deployment_examples_single_ssid.html

    Sincerely,

    Juan Nakasone | Support Engineer
    WatchGuard Technologies, Inc. | www.watchguard.com

    Hello, i did like that but there is not internet connection. Am i miss something?

  • What do you see in Traffic Monitor ?

Sign In to comment.