Watchguard Firebox X1000, Руководство пользователя

Страница: 55 / 314

Selecting a Firewall Configuration Mode
User Guide 33
Adding secondary networks to your
configuration
Whether you have chosen routed or drop-in, your configu-
ration may require that you add secondary networks to
any of the three Firebox interfaces. A secondary network is
a separate network connected to a Firebox interface by a
switch or hub.
Routed Configuration Drop-in Configuration
Criterion 1
All interfaces of the
Firebox are on different
networks. Minimum
configured are external and
trusted.
All interfaces of the
Firebox are on the same
network and have the same
IP address (Proxy ARP).
Criterion 2 Trusted and optional
interfaces must be on
separate networks and
must use IP addresses
drawn from those
networks. Both interfaces
must be configured with an
IP address on the same
network, respectively.
Machines on the trusted or
optional interfaces can be
configured with a public IP
address.
Criterion 3
Use static NAT to map any
public addresses to private
addresses behind the
trusted or optional
interfaces.
Because machines that are
publicly accessible have
public IP addresses, no
static NAT is necessary.