Watchguard Firebox X1000, User Manual

Page: 294 / 314

Appendix A: Troubleshooting Firebox Connectivity
272 WatchGuard Firebox System
Method 1: Ethernet Dongle Method
This method involves using a single crossover cable.
1 Make sure the Firebox and the management station are
disconnected from the network.
2
Connect one end of the crossover cable to the optional
interface and the other end to the external interface,
creating a loop. Power-cycle the Firebox.
This cabling should produce the following light sequence on the
front of the Firebox:
Armed light: steady
Sys A light: flickering
(Do not be concerned with the lights on the Security Triangle
Display indicating traffic between interfaces.)
3
Disconnect the crossover cable from the optional and
external interfaces. Now, connect one end to the
trusted interface and the other end to the management
station. Do not turn off the Firebox.
4 Make sure the management station has a static IP
address. If it doesn’t, change the TCP/IP settings to a
static IP address. The computer designated as the
management station should be on the same network as
the configuration file, preferably the trusted network,
so you do not need to reassign an IP address to your
computer after the configuration file has been
uploaded.
The following is an example of a typical IP address scheme:
Management station: 192.168.0.5
Subnet mask: 255.255.255.0
Default gateway: 192.168.0.1
Trusted network: 192.168.0.1 (from the configuration file)
5 It is recommended that you double-check the IP
address of the management station. To do this, open a
DOS prompt and type
ipconfig /all
.
6
Use the Ping command to assign the Firebox a
temporary IP address so your management station can
communicate with the Firebox. At the DOS prompt,
type
ping 192.168.0.1
(this is the default gateway
of your computer). You will then see a request timeout.
Ping again. You should get four replies.