Hardware Firewall - Page 2

ic2 · 17-01-2008, 21:03

Quote:

Originally Posted by LSainsbury

Well it arrived today - just sent an email to Watchguard to get it re-registered to me so I can get the latest firmware.

To get the latest firmware you need to have a valid live security licence. If you dont, then no technical support or firmware updates.

If it was previously registered then the buyer should have transfered it to you via this web site https://www.watchguard.com/support/land.aspx? I also suggest you create an account here as well.

If the licence has lapsed, then you have to pay an additional fee as well.

17-01-2008, 21:35

Quote:

Originally Posted by ic2

To get the latest firmware you need to have a valid live security licence. If you dont, then no technical support or firmware updates.

If it was previously registered then the buyer should have transfered it to you via this web site https://www.watchguard.com/support/land.aspx? I also suggest you create an account here as well.

If the licence has lapsed, then you have to pay an additional fee as well.

Hi - yeah I'm aware of that, but thanks anyway. I'm not too bothered about TS but a firmware update would be nice. It has March 2005 on it...actually I could download it using another customers details...there's an idea!

Anyway - another question for you network experts...

Current setup is as follows:

ISP > Linksys Router > My LAN

My ISP give my router an address of say 80.10.10.10 and DHCP for my LAN is on so client PC's get 192.168.0.x.

On the firewall it lists two networks trusted (my LAN) and external WAN.

Everything I've read in the firewall documents state that the external WAN gets the external address -again 80.10.10.10.

How can this be if the router is supplying the addresses?

I know I should switch off DHCP /Local LAN (trusted) on the router and switch DHCP on for the trusted LAN on the firewall, but how does the ISP address get passed to external WAN interface on the firewall?

I think I'm missing a fundamental trick here and once I know that, it'll all slip into place....

Cheers
Lee

ic2 · 17-01-2008, 21:51

Quote:

Originally Posted by LSainsbury

I think I'm missing a fundamental trick here and once I know that, it'll all slip into place....

Lee,

my set up is ISP>firewall>LAN

Off the firewall also hangs the wireless router. I let the watchguard deal with the DHCP.

Have you tried ISP>firewall>linksys>LAN ?

17-01-2008, 21:54

Quote:

Originally Posted by ic2

Lee,

my set up is ISP>firewall>LAN

Off the firewall also hangs the wireless router. I let the watchguard deal with the DHCP.

Have you tried ISP>firewall>linksys>LAN ?

There's no ADSL modem on the SOHO...

So it has to be ISP > Linksys Router > Firewall > LAN

ic2 · 17-01-2008, 21:58

Quote:

Originally Posted by LSainsbury

There's no ADSL modem on the SOHO...

OK. Thought you were on cable.

Cant you turn off DHCP off on the watchguard?
Not familiar with SOHO but register at watchguard and they have a forum set up for SOHO users (just checked). They may be able to assist you better?

17-01-2008, 22:03

Quote:

Originally Posted by ic2

OK. Thought you were on cable.

Cant you turn off DHCP off on the watchguard?
Not familiar with SOHO but register at watchguard and they have a forum set up for SOHO users (just checked). They may be able to assist you better?

Na mate - ADSL here! Was a cable user in a previous life, but the mods would'nt let me leave!

Yeah - can switch DHCP off or on for both WAN and trusted LAN.

Perhaps the fundamental thing I'm missing it bridging mode on the router?

That would pass the traffic as is to the WAN interface on the firewall wouldn't it?

ic2 · 17-01-2008, 22:14

Quote:

Originally Posted by LSainsbury

That would pass the traffic as is to the WAN interface on the firewall wouldn't it?

not sure. Any good : http://www.watchguard.com/help/docs/...OUserGuide.pdf

18-01-2008, 06:25

Quote:

Originally Posted by ic2

not sure. Any good : http://www.watchguard.com/help/docs/...OUserGuide.pdf

Already downloaded and reading!

Bri_G · 20-01-2008, 21:02

I might be missing something here but if your'e on ADSl you have a modem/router?

This is where you get 80.10.10.10 from. This is the WAN address.

Unless you have a modem-> router->firewall setup in which case DHCP may be turned off on the router? Then you get 80.10.10.10 from the modem via the router without it changing.

If the firewall has DHCP I would go with that, it will make things easier in future.
You should be able to specify the address range of your lan, again it will make diagnostics easier if you use numbers that are specific to you, and are easy to remember.

I use a mixture of my old army number and my daughters birthday!