Can I Batch Upload Static Ips Sonicwall
Configuring Multiple WAN subnets using static ARP with SonicOS Enhanced
10/xiv/2021
356 People found this article helpful
97,983 Views
Description
Information technology is not currently possible to directly assign more than a single IP address to a primary or secondary WAN interface, merely the SonicWall appliance is capable of answering on behalf of a ane-2-1 NAT policy prepare up for a network resource. This would exist useful in environments where an Isp has assigned a customer multiple dissimilar public IP subnet blocks, and the client wishes to utilise IP addresses from these blocks to provide access to internal network resources. One solution is to have the ISP configure upstream routing to point these subnets to the fixed IP address of the principal or secondary WAN interfaces of the SonicWall. An alternative is to configure static ARP and routing on the SonicWall to reply to a 2nd IP subnet. Yous would do this by configuring a Static ARP entry for the secondary WAN subnet and adding a route for that subnet to the routing tabular array.
- Internet access provider provided principal subnet configured on the X1 (WAN) interface:1.1.1.0/24.
- Additional cake of IP addresses provided by the ISP:2.2.2.0/24.
- SMTP Server in the LAN to exist accessed from outside usingtwo.two.ii.l.
Resolution
Resolution for SonicOS vi.5
This release includes pregnant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The beneath resolution is for customers using SonicOS half-dozen.v firmware.
Creating a Static ARP entry
- Login to the SonicWall management interface.
- ClickMANAGE on the peak bar and navigate to theNetwork | ARP folio andclick on theOKpush and then hitACCEPT button at the bottom.
IP Accost: 2.2.2.one(specify an IP accost from the boosted subnet)
Interface: WAN / X1 (because the boosted subnet resides on the WAN interface)
Publish Entry - Enabling this option causes the SonicWall to respond to ARP queries for the specified IP address with the SonicWall's MAC address. This box must be checked when creating additional subnets. - ClickOK.
Creating a Static Road
- Navigate toNetwork | Routingpage.
- ClickAdd .
Source: Whatever
Destination :New WAN Subnet
Service : Whatever
Gateway: 0.0.0.0
Interface: X1
Metric: 20 - Creating a newAddress Object Proper name: the Address Object for your secondary subnet
Zone:WAN
Blazon: Network
Network: Enter the Network ID of the Secondary subnet
Annotation: The SonicWall will non reply to ICMP/SNMP/HTTP/HTTPS management traffic on a published Static ARP IP address.
Configuring a SMTP server behind SonicWall with the new WAN subnet
The SMTP server at192.168.168.100 will be NATed toii.2.two.50 ip address when going out to the Internet. Besides, the SMTP server tin exist access from the outside using IP address 2.two.2.fifty.
- Create apublic and aindividual address object for theSMTP server (For the same, please navigate toObjects | Accost Objects ).
- Configure an Inbound NAT Policy underRules | NATPolicies.
- Create anaccess dominionassuasive inboundSMTP access.
- Action:Allow
- From Zone:WAN
- To Zone:LAN
- Service:SMTP
- Source:Any
- Destination:SMTP Server_Public
- Users Allowed: All
- Schedule:Always on
- Enable Logging:checked
- Allow Fragmented Packets:checked
Resolution for SonicOS 6.2 and Beneath
The beneath resolution is for customers using SonicOS half dozen.2 and earlier firmware. For firewalls that are generation 6 and newer we advise to upgrade to the latest general release of SonicOS 6.five firmware.
Creating a Static ARP entry
- Login to the SonicWall management interface.
- Navigate to the Network | ARP page andclickAdd.
- IP Address: two.two.2.1(specify an IP address from the additional subnet).
- Interface: WAN / X1 (because the additional subnet resides on the WAN interface).
- Publish Entry - Enabling this option causes the SonicWall to respond to ARP queries for the specified IP address with the SonicWall'southward MAC address. This box must be checked when creating boosted subnets.
- Click OK.
Creating a Static Road
- Navigate to the Network | Routing page.
- ClickAdd . Create the following new route policy.
Source: Any
Destination :New WAN Subnet
Service : Any
Gateway: 0.0.0.0
Interface: X1
Metric: 20 - Creating a newAddress Object. Name: the Accost Object for your secondary subnet (New Wan Subnet)
Zone:WAN
Type: Network
Network: Enter the Network ID of the Secondary subnet
-
NOTE: The SonicWall will not reply toICMP/SNMP/HTTP/HTTPS direction traffic on a published Static ARP IP address.
Configuring a SMTP server behind SonicWall with the new WAN subnet
The SMTP server at 192.168.168.100 volition exist NATed to ii.2.2.50 ip address when going out to the Internet. Likewise, the SMTP server can be access from the outside using IP address 2.2.2.l.
- Create a public and a private address object for the SMTP server
- Configure an Inbound NAT Policy under Network | NAT Policies.
- Original Source:Any
- Translated Source:Original
- Original Destination:SMTP Server_Public
- Translated Destination:SMTP Server_Private
- Original Service:SMTP
- Translated Service:Original
- Entering Interface:Any
- Outbound Interface: Any
- Comment: Webserver behind SonicWall.
- Enable NAT Policy:Checked
- Create a reflexive policy:Checked
- Create an Access Rule assuasive entering SMTP access.
- Action:Allow
- From Zone:WAN
- To Zone:LAN
- Service:SMTP
- Source:Any
- Destination:SMTP Server_Public
- Users Allowed: All
- Schedule:Always on
- Enable Logging:checked
- Allow Fragmented Packets:checked
Related Articles
- Best practices for administrator managing SonicWall Firewall Appliances
- How to configure failover when there are two or more WAN Interfaces?
- How can I put the SonicWall into safe style?
Categories
- Firewalls > NSa Series > Networking
- Firewalls > NSv Serial > Networking
- Firewalls > TZ Series > Networking
Was This Article Helpful?
Source: https://www.sonicwall.com/support/knowledge-base/configuring-multiple-wan-subnets-using-static-arp-with-sonicos-enhanced/170503911164326/
Belum ada Komentar untuk "Can I Batch Upload Static Ips Sonicwall"
Posting Komentar