NETGEAR SRX5308 Reference Manual page 66

It is important that you ensure that any secondary LAN addresses are different from the
primary LAN, WAN, and DMZ IP addresses and subnet addresses that are already
configured on the VPN firewall.The following is an example of correctly configured IP
addresses:
WAN1 IP address: 10.0.0.1 with subnet 255.0.0.0
WAN2 IP address: 20.0.0.1 with subnet 255.0.0.0
DMZ IP address: 192.168.10.1 with subnet 255.255.255.0
Primary LAN IP address: 192.168.1.1 with subnet 255.255.255.0
Secondary LAN IP address: 192.168.20.1 with subnet 255.255.255.0

To add a secondary LAN IP address to the default VLAN:
1. Select Network Configuration > LAN Settings > LAN Multi-homing. The LAN
Multi-homing screen displays:
Figure 33.
The Available Secondary LAN IPs table displays the secondary LAN IP addresses that
were added to the VPN firewall.
2. In the Add Secondary LAN IP Address section of the screen, enter the following settings:
• IP Address. Enter the secondary address that you want to assign to the LAN ports.
• Subnet Mask. Enter the subnet mask for the secondary IP address.
3. Click the Add table button in the rightmost column to add the secondary IP address to the
Available Secondary LAN IPs table.
Repeat step 2
Available Secondary LAN IPs table.
Note: Secondary IP addresses cannot be configured on the DHCP server.
The hosts on the secondary subnets needs to be manually
configured with the IP addresses, gateway IP address, and DNS
server IP addresses.
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
and step 3 for each secondary IP address that you want to add to the
LAN Configuration
66