SMA 210/410 Deployment Guide
Connecting the SMA on an Existing DMZ
13
7 On the
Network > Address Objects
page, click the
Address Groups
tab.
8 Click
Add Group
.
9 In the Add Address Object Group dialog box, create a group for the X0 interface IP address of your SMA
appliance and the NetExtender IP range:
•
Enter a name for the group.
•
In the left column, select the address objects you created and click the right arrow button.
•
Click
OK
to create the group when both objects are in the right column.
10 On the
Network > Interfaces
page, verify that the assigned zone is DMZ for the interface connected to
your SMA appliance.
11 Navigate to the
Firewall > Access Rules
page, and select the Matrix view style.
12 Click the
DMZ > LAN
icon.
13 On the page that displays for DMZ to LAN, click
Add
.
14 In the Add Rule window, create a rule to allow access to the LAN for the address group you just created:
Starting IP address
Start of the NetExtender IP
address range within your DMZ
range, such as 10.1.1.220.
Ending IP address
End of the NetExtender IP
address range within your DMZ
range, for example 10.1.1.249.
From
DMZ
To
LAN
Service Port
Any
Service
Any
