Comcast Fiber with Sophos UTM

I have a Sophos SG230 UTM device that I am wanting to use with Comcast FIber, my question is how to configure the WAN nic for use?

Here is what CC gave me:

Assign to your Layer 3 device:
P2P IP:  50.*.*.128/29
Gateway: 50.*.*.129
Customer Layer 50.*.*.130-50.*.*.134
P2P Subnet: 255.255.255.248
 
 
Customer’s Usables:
Customer Allocation: 50.*.*.0/27
Customer Useable IPs: 50.*.*.1 - 50.*.*.30
Customer Allocation Subnet: 255.255.255.224
Usable IPV6 Block – N/A
 
DNS Servers:
Primary: 75.75.75.75           Secondary:  75.75.76.76

So for the WAN address, would i assign the 50.*.*.130 with the 50.*.*.129 as the GW and then use the customer usables entered as secondary IP addresses then NAT the traffic, or would I assign the customer usable to the WAN directly and add the remaining as secondary?

Sorry, new at fiber setup and you help is appreciated.
CCSNVAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

masnrockCommented:
A key difference between the cable and fiber services is that Comcast makes you do your own routing with the fiber service.

That said, I would invest in a router or layer 3 switch. 2Makes life much easier. That device would be between your Sophos and the Comcast fiber unit.
0
Dirk KotteSECommented:
"So for the WAN address, would i assign the 50.*.*.130 with the 50.*.*.129 as the GW"
thats correct.
you may use a private IP address-range at the customer lan and use NAT / masquerading at the external interface.
or you use the "customer usable " IP range at the LAN or DMZ and are free to use NAT also or not.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
masnrockCommented:
Any updates?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.