Watchguard Firebox X1000, User Manual

Page: 57 / 314

Selecting a Firewall Configuration Mode
User Guide 35
• After you have finished with the installation, you can
add secondary networks to any interface using Policy
Manager, as described in “Adding Secondary
Networks” on page 64.
Dynamic IP support on the external interface
If you are supporting dynamic IP addressing, you must
choose routed configuration.
If you choose the Dynamic Host Configuration Protocol
(DHCP) option, the Firebox will request its IP address,
gateway, and netmask from a DHCP server managed by
your Internet Service Provider (ISP). This server can also
provide WINS and DNS server information for your Fire-
box. If it does not, you must add it manually to your con-
figuration, as described in “Entering WINS and DNS
Server Addresses” on page 65. You can also change the
WINS and DNS values provided by your ISP, if necessary.
Point-to-Point Protocol over Ethernet (PPPoE) is also sup-
ported. As with DHCP, the Firebox initiates a PPPoE proto-
col connection to your ISP’s PPPoE server, which
automatically configures your IP address, gateway, and
netmask. However, PPPoE does not propagate DNS and
WINS server information as DHCP does.
If you are using PPPoE on the external interface, you will
need the PPP user name and password when you set up
your network. Both username and password each have a
256-byte capacity.
When the Firebox is configured such that it obtains its IP
addresses dynamically, the following functionality (which
requires a static IP address) is not supported unless you are
certain that the dynamic IP settings sent by your ISP will
not change:
•
High Availability (not supported on Firebox 500)
• Drop-in mode
• 1-to-1 NAT