WatchGuard - Configuring 2 External Interface IPs for Separated Outbound Traffic

I have a WatchGuard XTM 26-W that is configured with two wireless access points. One is set to bridge to a trusted interface, the other is set to bridge to a separate trusted interface. I already have the first trusted interface working / using the first External interface on the WG, but the second wireless/trusted interface also seems to be using the first External interface. I would like for the second Wireless Access / trusted interface traffic, both inbound and outbound, to flow through the second External interface / IP address.

Is this possible?
TogaMarioAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Jon SnydermanConnect With a Mentor Commented:
Yes.  You need fireware PRO.  Then you create seperate rules.for the second AP and use policy based routing (PBR) to force the traffic to the second external interface.

~Jon
0
 
skullnobrainsCommented:
you can also specify the interface in the nat rule

http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#en-US/nat/nat_dynamic_firewall_add_c.html%3FTocPath%3DNetwork%20Address%20Translation%20%28NAT%29|About%20Dynamic%20NAT|_____1

i'd assume the source addresses are not the same so you would configure one NAT rule per subnet with the corresponding interface. watchguard shoud be able to use the proper IP (doc 2 pages below states so)

if your multi-wan setting is correct (or if they are tunnel interfaces) the watchguard should select the proper routes. if not, see here http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#en-US/multiwan/routing_table_configure_c.html%3FTocPath%3DMulti-WAN|Configure%20Routing%20Table|_____0
0
 
TogaMarioAuthor Commented:
Thank you for the fast turn-around. I will update as soon as I have access to the system again and am able to test these out.
0
 
TogaMarioAuthor Commented:
That's exactly what I was looking for. Thanks, Jon
0
All Courses

From novice to tech pro — start learning today.