Main Menu
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Events
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • SonicWall Promotions
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
SonicWall
  • Products
      All Products A–Z
      Free Trials
    • Network Security
      • Next-Generation Firewall (NGFW)
      • Network Security Services
      • Network Security Management
      • Secure SD-WAN
    • Threat Protection
      • Advanced Threat Protection Cloud
      • Advanced Threat Protection Appliance
      • Capture Labs
    • Secure Access Service Edge (SASE)
      • Zero-Trust Network Access (ZTNA)
    • Cloud Security
      • Cloud Firewall
      • Cloud App Security
    • Endpoint Security
      • Endpoint Detection & Response (EDR)
    • Email Security
      • Cloud Email Security
      • Hosted Email Security
      • On-Prem Email Security
    • Secure Access
      • Wireless Access Points
      • Network Switch
      • Virtual Private Network (VPN)
    • Wi-Fi 6 Access Points

      SonicWall SonicWave 600 series access points provide always-on, always-secure connectivity for complex, multi-device environments.

      Read More
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Network Segmentation
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure Wi-Fi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Events
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Events
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • SonicWall Promotions
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • English English English en
  • BLOG
  • CONTACT SALES
  • FREE TRIALS
  • English English English en
SonicWall
  • Products
      All Products A–Z
      Free Trials
    • Network Security
      • Next-Generation Firewall (NGFW)
      • Network Security Services
      • Network Security Management
      • Secure SD-WAN
    • Threat Protection
      • Advanced Threat Protection Cloud
      • Advanced Threat Protection Appliance
      • Capture Labs
    • Secure Access Service Edge (SASE)
      • Zero-Trust Network Access (ZTNA)
    • Cloud Security
      • Cloud Firewall
      • Cloud App Security
    • Endpoint Security
      • Endpoint Detection & Response (EDR)
    • Email Security
      • Cloud Email Security
      • Hosted Email Security
      • On-Prem Email Security
    • Secure Access
      • Wireless Access Points
      • Network Switch
      • Virtual Private Network (VPN)
    • Wi-Fi 6 Access Points

      SonicWall SonicWave 600 series access points provide always-on, always-secure connectivity for complex, multi-device environments.

      Read More
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Network Segmentation
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure Wi-Fi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Events
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Events
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • SonicWall Promotions
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • Menu

How to configure a physical interface with a static IP

07/22/2022 198 People found this article helpful 184,600 Views

    Download
    Print
    Share
    • LinkedIn
    • Twitter
    • Facebook
    • Email
    • Copy URL The link has been copied to clipboard

    Description

    Depending upon the model of firewall, the number of physical interfaces vary on each of them.

    Each interface is configurable with various IP assignments depending upon the zone type:

    • LAN : Static IP Mode (default), Transparent IP Mode (Splice L3 Subnet), Layer 2 Bridged Mode (IP Route Option), Wire Mode (2-Port Wire), Tap Mode (1-Port Tap), IP Unnumbered, PortShield Switch Mode, NativeBridge Mode
    • WAN : Static (default), DHCP, PPPoE, PPTP, L2TP, Wire Mode, (2-Port Wire), Tap Mode (1-Port Tap)
    • DMZ : Static IP Mode (default), Transparent IP Mode (Splice L3 Subnet), Layer 2 Bridged Mode (IP Route Option), Wire Mode (2-Port Wire), Tap Mode (1-Port Tap), IP Unnumbered, PortShield Switch Mode, NativeBridge Mode
    • WLAN : Static IP Mode (default), PortShield Switch Mode, Layer 2 Bridged Mode, NativeBridge Mode

    This article describes how to configure the physical interfaces on SonicWall with a static IP Mode. 

    Resolution

    Resolution for SonicOS 7.X

    This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

    To configure a physical interface on SonicWALL with a static IP Mode:

    1. Navigate to NETWORK | System | Interfaces.
    2. In the Interface Settings table, point the arrow on top of it, and press "Edit this Interface." Image
    3. Select a zone to assign to the interface from Zone - LAN, WAN, DMZ, WLAN or any Custom zone you’ve created. 

    NOTE: You can Create new zone as well.

    Image

          4. From Mode / IP Assignment select Static (default for WAN) or Static IP Mode (default for LAN)

    Image

          5. Enter the IP address and subnet mask for the interface into the IP Address and Subnet Mask fields.

    Image

          6. If configuring a  WAN zone interface or the MGMT interface, enter the IP address of the gateway device into the Default Gateway field. But if configuring a LAN zone interface or a DMZ zone interface, optionally enter the IP address of the gateway device into the Default Gateway (Optional) field.

          NOTE: You cannot enter an IP address that is in the same subnet as another zone.

          7. Incase of WAN zone interface, enter the IP addresses of up to three DNS servers into the DNS Server fields.

    Image

          8. Enter any optional comment text in the Comment field. 

          9. If you want to enable remote management of the Security Appliance from this interface, choose the
    supported Management protocol(s) - HTTPS, Ping, SNMP, SSH.

    Image

       10. If you want to allow selected users with limited management rights to log in to the Security Appliance,
    choose HTTP, HTTPS in User Login.

    Image

    Resolution for SonicOS 6.5

    This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

    To configure a physical interface on SonicWALL with a static IP Mode:

    1. Navigate to MANAGE | Network | Interfaces.
    2. In the Interface Settings table, click the Edit icon for the interface you want to configure. The Edit Interface dialog displays.

      Image

    3. Select a zone to assign to the interface from Zone - LAN, WAN, DMZ, WLAN or any Custom zone you’ve created.
      NOTE: You can Create new zone as well.

      Image

    4. From Mode / IP Assignment select Static (default for WAN) or Static IP Mode (default for LAN)

      Image

    5.  Enter the IP address and subnet mask for the interface into the IP Address and Subnet Mask fields.

      Image

    6.  If configuring a  WAN zone interface or the MGMT interface, enter the IP address of the gateway device into the Default Gateway field. But if configuring a LAN zone interface or a DMZ zone interface, optionally enter the IP address of the gateway device into the Default Gateway (Optional) field. 

      NOTE: You cannot enter an IP address that is in the same subnet as another zone.

    7. Incase of WAN zone interface, enter the IP addresses of up to three DNS servers into the DNS Server fields.

      Image

    8. Enter any optional comment text in the Comment field. 
    9. If you want to enable remote management of the Security Appliance from this interface, choose the
      supported Management protocol(s) - HTTPS, Ping, SNMP, SSH. 

      Image

    10. If you want to allow selected users with limited management rights to log in to the Security Appliance,
      choose HTTP, HTTPS in User Login. 

      Image

    Configuring Advanced Settings for a Static Interface:

    SonicOS 7.X

    Image

    SonicOS 6.5

    Image

    1. For Link Speed, Auto Negotiate is selected by default, which causes the connected devices to negotiate the speed and duplex mode of the Ethernet connection automatically. To force Ethernet speed select an option from Link Speed drop down menu.

      CAUTION: If you select a specific Ethernet speed and duplex, you must force the connection speed and
      duplex from the Ethernet card to the Security Appliance as well.

    2. Use Default MAC Address is selected by default. You can override Use Default MAC Address for the Interface
      by choosing Override Default MAC Address and entering the MAC address in the field.

    3. Select Shutdown Port to temporarily take this interface offline for maintenance or other reasons. If
      connected, the link goes down. This option is not selected by default.

      NOTE: You cannot shut down the management interface or the interface you are currently
      using.

    4. For the AppFlow feature, select Enable flow reporting to allow flow reporting on flows created for this
      interface. This option is selected by default.

    5. Optionally, select Enable Multicast Support to allow Multicast reception on this interface. This option is
      not selected by default.

    6. Optionally, select Enable Default 802.1p tagging to tag information passing through this interface with
      802.1p priority information for Quality of Service (QoS) management. This option is not selected by
      default.

    7. Optionally, to exclude the interface from Route Advertisement, select Exclude from Route
      Advertisement (NSM, OSPF, BGP, RIP). This option is not selected by default.

    8. Optionally, select Management Traffic Only to restrict traffic to only SonicWall management traffic and
      routing protocols. This option is not selected by default.

    9. Optionally, if you have enabled DNS Proxy, the Enable DNS Proxy option for displays for LAN, DMZ, or
      WLAN interfaces. To enable DNS Proxy on the interface, select the option. This option is not selected by
      default.

    10. Optionally, enable Asymmetric Route Support on the interface by selecting Enable Asymmetric Route
      Support. If enabled, the traffic initialized from this interface supports asymmetric routes, that is, the
      initial packet or response packet can pass through from other interfaces. This option is not selected by
      default. 

    11. Optionally, select Link Aggregation or Port Redundancy from Redundant /Aggregate Ports. 

    12. To specify the largest packet size (MTU – maximum transmission unit) that a WAN interface can forward
      without fragmenting the packet, enter the size of the packets that the port receives and transmits in the
      Interface MTU field. 
      To calculate Interface MTU for a WAN interface, click How Can I Test And Change The MTU Size Of WAN Interfaces?

    13. Optionally, to fragment non-VPN outbound packets larger than the interface’s MTU, select Fragment
      non-VPN outbound packets larger than this Interface’s MTU. This option is selected by default. 

    14. Optionally, to override the Do-not-fragment packet bit, select Ignore Don’t Fragment (DF) bit.
      This option is not selected by default.

    15. To block notification that the WAN interface can receive fragmented packets, select Do not send ICMP
      Fragmentation Needed for outbound packets over the Interface MTU. This option is not selected by
      default.

    16.  If configuring bandwidth management for this interface, go to Enabling Bandwidth Management on an
      Interface.

    17. Click OK.

    Related Articles

    • Identical Access Rules for different users/user groups
    • Advanced Network Security eLearning Training Course
    • Network Security Essentials eLearning Training Course

    Categories

    • Firewalls > TZ Series
    • Firewalls > NSa Series
    • Firewalls > SonicWall SuperMassive 9000 Series
    • Firewalls > SonicWall NSA Series

    Not Finding Your Answers?

    ASK THE COMMUNITY

    Was This Article Helpful?

    YESNO

    Article Helpful Form

    Article Not Helpful Form

    Company
    • Careers
    • News
    • Leadership
    • Awards
    • Press Kit
    • Contact Us
    Popular resources
    • Communities
    • Blog
    • SonicWall Capture Labs

    Stay In Touch

    • By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. You can unsubscribe at any time from the Preference Center.
    • This field is for validation purposes and should be left unchanged.
    • Facebook
    • Twitter
    • Linkedin
    • Youtube
    • Instagram

    © 2023 SonicWall. All Rights Reserved.

    • Legal
    • Privacy
    • English
    Scroll to top