x700 optional port

[woodlee]

i have a firebox x700 and what i want to achieve is as follows:

we have 1 spare public ip address and would like to assign it to connect to a device that is connected to an optional port i.e eth5. this device will have no connectivity to our in house network.

i'm a little unsure of the best and safest way of achieving this setup.

regards

lee

 

[coladmin]

you will need to connect this device to the first optional port as you need to license any additioanl ports past the 3rd port. create a NAT ip for the optional port for example

172.16.10.1 255.255.255.0

and then give the device an ip on this network

172.16.10.2 255.255.255.0

now create a 1-1 NAT for this device by going into setup>>nat from the policy config

now go to advanced..1-1NAT setup...and make an entry for this device on the eth3 interface with a NAT base of the public IP and the real base as the internal IP

now you would need to create a rule on the firebox to allow outgoing and incoming traffic in the policy manager

let me know

 

[woodlee]

Thanks coladmin

just one question i i could.

i have set up as you surgested and can connect to the net from a device connected to the optional port but if i try to connect to that device remotly using vnc or a programme like this it don't allow me to connect or can i ping the device.please could you explain to me how to setup the policy for inbound traffic


thanks

lee

 

[coladmin]

for example if you wanted to create a pint rule for this device you would add the new rule and then put the following into the to box in the rule

the external IP and the internal IP

now you should be able to pass traffic to this device

let me know