How can I configure secondary IP address on WAN interface for firewall management purpose?

12/20/2019 109 39639

DESCRIPTION:

It is not currently possible to directly assign more than a single IP address to a primary or secondary WAN interface, but the SonicWall appliance is capable of answering on behalf of a 1-2-1 NAT policy set up for a network resource. This would be useful in environments where an ISP has assigned a customer multiple dissimilar public IP subnet blocks, and the customer wishes to use IP addresses from these blocks to either provide access to internal network resources or manage the SonicWall appliance.

This article explains how to configure a Secondary IP address on the WAN interface to manage the SonicWall appliance.

RESOLUTION:

Procedure

• Create Address Object for the secondary IP.
• Create NAT Policy.
• Create Access Rules.

Creating the new Address Object

Login to your SonicWall management page and click Manage tab on top of the page.

• Navigate to Objects | Address Objects page. On right Side, Click Address objects tab and select View as Custom.
• Click  Add button under Address Objects, to get Add Address Object  Window. 
• Create an Address Object as below and click OK button to save settings.
  

 Creating the NAT Policy

Login to your SonicWall management page and click Manage tab on top of the page.

• Navigate to Rules| NAT Policy page. On right Side.
• Click  Add button to get Add NAT Policy window. 
• Create an NAT as below and click OK button to save.
  

 Creating the WAN to LAN Access Rule

Login to your SonicWall management page and click Manage tab on top of the page.

• Navigate to Rules |Access Rules. On right side, click Matrix button and choose zone from WAN to LAN.
  
• Click Add and In Add Rule window, create an access rule From WAN To LAN zone as below.
  

  NOTE: Option Enable Management should be checked in the access rules. This option was introduced from SonicOS 6.2.0 for Gen6 and 5.9.0 for Gen5. So make sure your firmware version on the firewall is newer than them.