ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
Manually Configuring Internet and WAN Settings
3-17
v1.0, September 2009
Configuring Secondary WAN Addresses
A single WAN Ethernet port can be accessed through multiple IP addresses by adding aliases to
the port. An alias is a secondary WAN address. One advantage is, for example, that you can assign
different virtual IP addresses to a Web server and FTP server, even though both servers use the
same physical IP address. You can add several secondary IP addresses to the UTM10’s single
WAN port or to the UTM25’s WAN1 port and WAN2 port.
After you have configured secondary WAN addresses, these addresses are displayed on the
following firewall rule screens:
•
In the WAN Destination IP Address pull-down menus of the following inbound firewall rule
screens:
–
Add LAN WAN Inbound Service screen
–
Add DMZ WAN Inbound Service screen
•
In the NAT IP pull-down menus of the following outbound firewall rule screens:
–
Add LAN WAN Outbound Service screen
–
Add DMZ WAN Outbound Service screen
For more information about firewall rules, see
“Using Rules to Block or Allow Specific Kinds of
Traffic” on page 5-3
).
To add a secondary WAN address to a WAN port:
1.
Select
Network Config
>
WAN Settings
from the menu. On the UTM25, the WAN Settings
submenu tabs appear, with the WAN1 ISP Settings screen in view. On the UTM10, the WAN
ISP Settings screen displays.
It is important that you ensure that any secondary WAN addresses are different from the
primary WAN, LAN, and DMZ IP addresses that are already configured on the UTM.
However, primary and secondary WAN addresses can be in the same subnet. The
following is an example of properly configured IP addresses on the UTM25:
Primary WAN1 IP address: 10.0.0.1 with subnet 255.0.0.0
Secondary WAN1 IP: 30.0.0.1 with subnet 255.0.0.0
Primary WAN2 IP address: 20.0.0.1 with subnet 255.0.0.0
Secondary WAN2 IP: 40.0.0.1 with subnet 255.0.0.0
DMZ IP address: 192.168.10.1 with subnet 255.255.255.0
Primary LAN IP address: 192.168.1.1 with subnet 255.255.255.0
Secondary LAN IP: 192.168.20.1 with subnet 255.255.255.0
