Scenario B: Connecting the SMA
on an Existing DMZ
The following procedures explain how to configure your
gateway appliance based on Scenario B:
•
Connecting the SMA to the Gateway on page 45
•
Allowing WAN to DMZ Connection on page 45
•
Allowing DMZ to LAN Connection on page 47
Connecting the SMA to the Gateway
To connect the SMA using Scenario B:
1 Connect one end of an Ethernet cable to your DMZ,
either directly to the corresponding port on your
existing SonicWall gateway appliance, to a hub, or to a
switch on your DMZ.
2 Connect the other end of the Ethernet cable to the X0
port on your SonicWall Secure Mobile Access 200/400.
The X0 Port LED lights up indicating an active
connection.
3 Configure the SMA X0 with an IP address in the DMZ
subnet. Refer to Configuring the X0 IP Address on page
34.
Allowing WAN to DMZ Connection
If you are already forwarding HTTP or HTTPS to an internal
server and you only have a single public IP address, you will
need to select different (unique) ports of operation for either
the existing servers or for the SMA appliance, because both
cannot concurrently use the same IP address and port
combinations.
To allow a WAN to DMZ connection:
1 Log into your gateway appliance as an administrator
and click the Wizards icon at the top right of the
interface.
SonicWall Secure Mobile Access 200/400 Getting Started Guide
45