?
Solved

Watchguard XTM routing

Posted on 2013-11-19
6
Medium Priority
?
706 Views
Last Modified: 2013-11-25
Hey

I have a Watchguard XTM33 firewall :)

I have 1 internet connection in port 0 (DHCP)
I have 1 IPTV connection in port 1 (DHCP)

All internet traffic to port 0 (internet)
Traffic to network 240.10.0.0/24 have to go to port 1.

How do I create a route? (using webgui)

Thanks in advance.

Mike
0
Comment
Question by:mikeydk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 3

Expert Comment

by:RKnebel512
ID: 39663806
What route do you need to create?

The watchguard should be smart enough to send anything that is heading to the 240.10.0.0/24 subnet out port 1, and anything else should be sent out port 0 towards the default gateway.

But if needed, additional can be created by going through the Watchguard Policy Manager.  On the network menu, select Routes.
0
 

Author Comment

by:mikeydk
ID: 39665748
Port 0 IP 92.92.0.1
Port 1 IP 10.20.1.1 and behind this is 240.10.0.0 net
0
 
LVL 3

Expert Comment

by:RKnebel512
ID: 39666266
Okay.  At the main screen of the Web UI, after you log in, choose the "network" menu from the top of the window, then select "routes".

Click "Add"

in the Choose Type dropdown, choose "Network IPv4"

in the route To box, type in "240.10.0.0/24"

In the Gateway box, type in 10.20.1.1

click "OK"

Make sure you save the configuration afterwards.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:mikeydk
ID: 39666473
I get the following error When adding route. "Network IP is not valid because its first octet is over 233 * Ip addresses with octet over 233 arme reserved address spaces."
0
 

Author Comment

by:mikeydk
ID: 39666477
Sorry over 223 ;)
0
 
LVL 3

Accepted Solution

by:
RKnebel512 earned 2000 total points
ID: 39666562
Oh yeah.  Anything 240 and above is considered a class E internet address and is reserved for "experimental" use.  They aren't considered publicly routable and many routers block them as a general rule.  I'm not sure you'll be able to get the watchguard to route that.

RFC 6890 lists IP subnets that are reserved for various reasons.

http://tools.ietf.org/html/rfc6890

I'm not sure if it's an option, but you might consider changing the address of that subnet to one that is recognized as routable.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month14 days, 18 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question