Configuring the DMZ / OPT Interface in NAT Mode

10/14/2021 103 People found this article helpful 112,738 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

You can configure the OPT interface in either Transparent Mode or NAT Mode

• NAT Mode translates the private IP addresses of devices connected to the OPT interface to a single, static IP address. By default, the OPT interface is configured in NAT Mode. When configuring the DMZ in NAT mode you must use a different subnet than the one specified for the LAN.
  

  EXAMPLE: LAN = 192.168.168.0, then DMZ = 10.1.1.1.

• Transparent Mode enables the SonicWall security appliance to bridge the OPT subnet onto the WAN interface. It requires valid IP addresses for all computers connected to the OPT interface on your network, but allows remote access to authenticated users. You can use the OPT interface in Transparent mode for public servers and devices with static IP addresses you want visible outside your SonicWall security appliance-protected network.

Resolution

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

Here's how to Configure DMZ in NAT Mode

1. Click Manage | System Setup | Nnetwork | Interfaces.
2. Click Notepad icon in the Configure column for the unassigned Interface you want to configure. The Edit Interface window is displayed.
   
3.  Select the DMZ in the dropdown next to Zone.
4. Choose Static in the IP Assignment dropdown menu.
5. Type the Private IP address, which is in a different subnet than that of the LAN. The DMZ IP address should be the gateway for the computers connected to the DMZ.
6. Enter any optional comment text in the Comment field. This text is displayed in the Comment column of the Interface table.
7. If you want to enable remote management of the SonicWall from this interface, select the supported management protocol(s): HTTP or HTTPS (either or both). Ping, SNMP and/or  SSH are optional protocols that can also be enabled.
8. If you want to allow selected users with limited management rights to log in to the security appliance, select HTTP and/or HTTPS in User Login.
9. Click OK to save changes.

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

Here's how to Configure DMZ in NAT Mode

1. Click Network | Interfaces.
2. Click the Notepad icon in the Configure column for the unassigned Interface you want to configure. The Edit Interface window is displayed.
   
3. Select the DMZ in the dropdown next to Zone.
4. Choose Static in the IP Assignment dropdown menu.
5. Type the Private IP address, which is in a different subnet than that of the LAN. The DMZ IP address should be the gateway for the computers connected to the DMZ.
6. Enter any optional comment text in the Comment field. This text is displayed in the Comment column of the Interface table.
7. If you want to enable remote management of the SonicWall from this interface, select the supported management protocol(s): HTTP or HTTPS (either or both). Ping, SNMP and/or SSH are optional protocols that can also be enabled.
8. If you want to allow selected users with limited management rights to log in to the security appliance, select HTTP and/or HTTPS in User Login.
9. Click OK to save changes.

Related Articles

• How to remove 2FA for admin using CLI
• 2FA authentication error using TOTP "Please try again later"
• Methods to add Address Objects

Categories

• Firewalls > NSa Series > Networking
• Firewalls > TZ Series > Networking
• Firewalls > NSv Series > Networking
• Firewalls > SonicWall SuperMassive 9000 Series > Networking