Connecting the SMA on an Existing DMZ
The following procedures explain how to configure your gateway on an existing DMZ:
l
Connecting the SMA to the Gateway
l
Allowing WAN to DMZ Connection
l
Allowing DMZ to LAN Connection
Connecting the SMA to the Gateway
To connect the SMA using Scenario B:
1. Connect one end of an Ethernet cable to your DMZ, either directly to the corresponding port on your
existing SonicWall gateway appliance, to a hub, or to a switch on your DMZ.
2. Connect the other end of the Ethernet cable to the X0 port on your SonicWall SMA 210/410. The X0
Port LED lights up indicating an active connection.
3. Configure the SMA X0 with an IP address in the DMZ subnet. Refer to
Configuring the X0 IP Address
for more information.
Allowing WAN to DMZ Connection
If you are already forwarding HTTP or HTTPS to an internal server and you only have a single public IP
address, you need to select different (unique) ports of operation for either the existing servers or for the SMA
appliance, because both cannot concurrently use the same IP address and port combinations.
To allow a WAN to DMZ connection:
1. Using SonicOS, log into your gateway appliance as an administrator and click the
Wizards
icon at
the top right of the interface.
2. On the
Configuration Guide
page, select the
Public Server Guide
, and then click
Next
.
3. On the
Public Server Guide
page of the
Wizard
, select:
Server Type
Other
Service
Create new group
The
Service Group
dialog box is displayed.
SMA 10.2 Deployment Guide for the SMA 100 Series
Connecting the SMA on an Existing DMZ
3
9
