Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1027
  • Last Modified:

watchguard x750e to external vlan

We recently had to change our ISP router to use VLANs in order to split our public address space into 2 subnets.  Now I need to reconfigure the firewall (watchguard x750e) to use the VLAN (65) instead of the external address.  I know the firewall has VLAN capabilities, but I do not know how to configure it.  Any help or pointers would be most welcome.

original config  (ip #'s changed to protect the innocent):
ISP 1.2.3.4   firewall interface (external) 1.2.3.5 gateway 1.2.3.4

now:
ISP vlan65 (1.2.3.4)  firewall interface (vlan?) ?.?.?.?

thanks for the help.
0
dondegner
Asked:
dondegner
  • 2
1 Solution
 
Paul SolovyovskyCommented:
I don't believe that you can do this on the 750, there are no vlan configuration tabs in WSM per WSM manual

http://www.watchguard.com/help/docs/v741WFSConfigurationGuide.pdf

If you do see a VLAN tab than it may be possible.

What you may be able to do is is get a switch and configure a switch port on vlan 65 then configure another switch port on vlan 65 and attach the watchguard, essentially define the vlan on the switch and keep the watchguard native format.

The newer Watchguard models such as the X22 do support VLANs
0
 
BrianCommented:
Even if it is going to use VLAN 65 it still needs an address. The older models do not support VLAN tagging. Look at an XTM 25 or maybe an XTM 33. They have similar specs to the 750 and are not prohibitively expensive for most.
0
 
dondegnerAuthor Commented:
the docs show that the box will support VLAN's on trusted and optional interfaces, but not on the external interface.  An intermediary switch was the best solution.
0
 
Paul SolovyovskyCommented:
Were you able to get the switch solution to work?  Just curious.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now