• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 912
  • Last Modified:

firebox edge x15 configuration issues

We have just installed a firebox egde x15 on our network.  We want to use the muvpn feature.

we are using a ZOOM x3 ADSL modem.

Our problem is we cannot get the external static IP assigned by our ISP to configured onto to the external interface of the firebox.

We have put the router in bridged mode with DHCP on but all that happens is the external interface of the edge recieves a DHCP IP of 192.168.111.1, and all traffice bewteen the watchguard and the router is blocked or stopped.  We have tried manual configuration but have a problem with entry for external gateway. Our ISP is demon internet and there gateway IP is on a differnet subnet to our static IP, which is an invalid configuration according to our firebox. ergo we are stuck. Has anyone got one of these things working with demon internet ADSL?

It works as a firewall only with following config:

trusted interface 192.168.195.254
external interface 192.168.111.2
Gateway (Zoom router) 192.168.111.1

The external interface is then placed in the DMZ, which allows us the access it from the internet using the static IP, but the MUVPN doesnt  work.

Any help would be much appreciated.
0
nelliedean1
Asked:
nelliedean1
1 Solution
 
mcrosslandCommented:
You need to get your ISP to provide you with a static PUBLIC IP for your external interface.  You cannot use DHCP on a firebox and use VPN functionality.  
Here is what I usually do.  Request a block of 5 ip addresses from the ISP.
The router uses one in bridged mode and then the firewall uses the next one in line.  You really would only need to add additional ones as needed.
Short version:  You need your router to pass all public traffic without dhcp.   Your firewall will handle all NAT translations...IE public to private IP addresses.  
As far as MUVPN, crapolla!   I use PPTP VPN instead.  I've installed tons of Watchguard firewalls and this is really a snap.
They have their querks but you just learn them as you go.

I hope I have effectively helped you with your question.  If not, please clarify and I would be more than happy to help further.

Mike
0
 
nelliedean1Author Commented:
I am happy with the comment, but not happy with my watchguard support and documentation, as they could have made this more obvious to the end user setting one of these up for the first time.

Many thanks
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Tackle projects and never again get stuck behind a technical roadblock.
Join Now