Public LAN IP

Please clarify your need in as much detail as you can on what you are trying to achieve (a diagram would be helpful)

Presumably you are provided a /30 wan side IP block to setup the link to the provider with a public IP block of a /29, /28, /27 etc for the vlan side

One option you can use one of your unused sonicwall ports to have an IP on the Provider LAN side that will be used by a LAN system to which you want to assign a public IP.

Commonly, LAN systems sit behind a NAT using private LAN IPs, the firewall rules can then be setup to allow access on a public IP to be forwarded to the LAN system for the service.


The VLAN requires that your switches are managed.
The switch is setup with VLANs.
The sonicwall is configured with a trunk feed to the switch that passes all traffic.
The port to which you connect the specific device would be tagged, marked as being part of a specific vlan that differs from others.

One option on the 2960 it gets two feeds one from he 1900 router and one from the sonicwall.
Not sure why you are not going straight from ONT into the sonicwall.
Placing a switch (managed, unmanaged) between the 1900 and sonicwall will allow devices to have a public IP but it will not be shielded by sonicwall, will be directly exposed to the outside.


If you are dealing with VOIP cloud based PBX, disabling the sip_alg on the sonicwall will help avoid VoIP calls.

If we direct plug the ONT to sonicwall FW WAN port how to use the public address eg static NAT from private IP to Public IP ?For my FW LAN Port what should i configure ?

Do you really need 8 Public IP's on the Dl-380?

You can setup 1:1 NAT (=Full Cone NAT)  by translating all IP addresses to the Private addresses used on the DL-380...
You can just forward (routing foward, not port forward) the traffic (which would mean to forward those 8 addresses from WAS -> LAN with the IP of the DL-380 as the gateway for that route.
The DL-380 will need to listen for those addresses though.  Esp. for outgoing traffic there is a need to bind to the right addresses by applications.
(Or you run VM's on the DL-380).

no ,my public address is need to use for different devices and the public address is need to use SNAT for WiFi Zone and use another public address for DMZ zone.

In that case All NAT etc. should be on the Sonic Wall.
Either 1:1 NAT to a device behind it, or using port forwarding for specific address/port combinations  to the backend device concerned.

We had completed the project last two week ,the router given by ISP is configure Dual LAN IP address.We manage to configure public address for all the devices.

I think the correct solution is configure secondary LAN IP in ISP router my problem are solved.