• Secure Mobile Access 10.2 for the SMA 100 Series
• Deployment Scenarios Overview
  • Selecting a Deployment Scenario
  • SMA 210/410 and 500v Deployment Scenarios
• Connecting the SMA on a New DMZ
  • Connecting the SMA to the Gateway
  • Allowing a WAN to SMA Connection
  • Allowing an SMA to LAN Connection
• Connecting the SMA on an Existing DMZ
  • Connecting the SMA to the Gateway
  • Allowing WAN to DMZ Connection
  • Allowing DMZ to LAN Connection
• Deploying SMA on the LAN
  • Connecting the SMA to the Gateway
  • Configuring SMA to LAN Connectivity
• Additional Configuration
  • Configuring the X0 IP Address
  • Configuring a Default Route
  • Adding a NetExtender Client Route
  • Setting Your NetExtender Address Range
  • Adding a New SMA Custom Zone
• Testing and Troubleshooting Your Remote Connection
  • Verifying a User Connection from the Internet
  • Policy > Access Rules Matrix View
• SonicWall Support
  • About This Document

Allowing WAN to DMZ Connection

If you are already forwarding HTTP or HTTPS to an internal server and you only have a single public IP address, you need to select different (unique) ports of operation for either the existing servers or for the SMA appliance, because both cannot concurrently use the same IP address and port combinations.

To allow a WAN to DMZ connection

1. Using SonicOS, log into your gateway appliance as an administrator and click the Wizards icon at the top right of the interface.
2. On the Configuration Guide page, select the Public Server Guide, and then click Next.

3. On the Public Server Guide page of the Wizard, select:

   Server Type	Other
   Service	Create new group

   The Service Group dialog box is displayed.

4. In the Service Group dialog box, create a service group for HTTP and HTTPS:

   • Enter a Name for the service group.
   • Select both HTTP and HTTPS and click the arrow button to move to the right column.
   • Click OK.

5. On the Server Private Network Configuration page, enter the following server information and click Next:

   Server Name	Name for the SMA appliance
   Server Private IP Address	The X0 IP address of the SMA appliance within your DMZ range, such as 10.1.1.10/24.
   Server Comment	Brief description of the server

6. On the Server Public Information page, accept the default IP address or enter a new IP address in your allowed public IP range. Click Next.

   The default IP address is the WAN IP address of your SonicWall firewall. If you accept this default, all HTTP and HTTPS traffic to this IP address is routed to your SMA appliance.

7. The Public Server Configuration Summary page displays all configuration actions that are performed. Click Apply to create the configuration and allow access from the WAN to the SMA appliance on the DMZ.