Adding Secondary Networks To Your Configuration - Watchguard Firebox X1000 User Manual

Routed Configuration
Criterion 1
All interfaces of the
Firebox are on different
networks. Minimum
configured are external and
trusted.
Criterion 2 Trusted and optional
interfaces must be on
separate networks and
must use IP addresses
drawn from those
networks. Both interfaces
must be configured with an
IP address on the same
network, respectively.
Criterion 3 Use static NAT to map any
public addresses to private
addresses behind the
trusted or optional
interfaces.
Adding secondary networks to your
configuration
Whether you have chosen routed or drop-in, your configu-
ration may require that you add secondary networks to
any of the three Firebox interfaces. A secondary network is
a separate network connected to a Firebox interface by a
switch or hub.
User Guide
Selecting a Firewall Configuration Mode
Drop-in Configuration
All interfaces of the
Firebox are on the same
network and have the same
IP address (Proxy ARP).
Machines on the trusted or
optional interfaces can be
configured with a public IP
address.
Because machines that are
publicly accessible have
public IP addresses, no
static NAT is necessary.
33