How to setup DMZ on Watchguard XMT 330

Hi PCITech,there is nothing, that could be directly called a 'DMZ' as you find it on some low end routers.Instead you have network interfaces, that each may represent their own full blown network (if you set them up for that). By default WatchGuard allows you to select between 'trusted' and 'optional' for a new network, that you configure, but you can also select 'custom'. Later, when you write firewall rules, you can than reference 'Any-Trusted' and 'Any-Optional' in your rules. But sometimes you don't want a network to follow the rules, that you have in place for 'Any-Optional' and than you need to set that network as a 'Custom' network.If you want to make a server in one of these additional networks accessible by the outside world, you have to set up SNAT rules, that connect between an external interface IP/port and your internal...

Hello,
 I'm either blind or over-worked (probably both) but I can't seem to find how to setup a DMZ on the XTM 330. I need to add an Avaya IP phone system and don't want to try using SIP because the vendor said they need no NAT.
Can someone please either direct me to the correct spot in the documentation or tell me how to do it?
Thanks in advance
This topic first appeared in the Spiceworks Community

Similar Messages

  • How can I setup DMZ network

    Hi,
    I would like to setup DMZ in my network to access 5 servers from internet. We have total 6 public IP's from service provider. We have firewall ASA 5510 with 4 ports. 1 is used for  outisde interface with public IP, another 2 are set in redundant interface as inside interface and 1 port is free. i want to connect all the five servers to this port as my management does not want to get DMZ traffic in to inside network. firewall is setup in router mode. Can someone please help to configure this?
    Regards
    Mukesh Patel.

    Interface GigabitEthernetx/x
     nameif dmz
     security-level 50
     ip address 172.16.1.1 255.255.255.0
    no shut
    The FW interface becomes the GW to your servers and you can assign static IPs to the Servers in the 172.16.1.0/24 range then you can install a L2 switch and create a shared L2 vlan between the FW DMZ interface and the Servers that needs to talk to the DMZ interface of the FW.
    Then you can configure acls for DMZ and apply them to the DMZ interface.
    access-group acl_dmz in interface dmz
    Do not forget that to make the 172.16.1.0/24 servers reachable from outside, you need to create static NAT entries for each server. For example:
     static (dmz,outside) Server_Public_IP_1 172.16.1.2 netmask 255.255.255.255
    static (dmz,outside) Server_Public_IP_2 172.16.1.3 netmask 255.255.255.255
    static (dmz,outside) Server_Public_IP_3 172.16.1.4 netmask 255.255.255.255
    static (dmz,outside) Server_Public_IP_4 172.16.1.5 netmask 255.255.255.255
    static (dmz,outside) Server_Public_IP_5 172.16.1.6 netmask 255.255.255.255

  • How to setup a Default Playlist to Airport but allows BYOD playlist override?

    Sorry for the unclear description.
    Here is what I am trying to accomplish.  I have my laptop or ipod playing a default playlist to my Airport express attached to my Stereo system.  The music plays fine with no issues.  I come into the house and want to play music from my iphone or ipad, I cannot connect or play to airport express since it is already sync'd or acquired by my laptop.
    My goal is to have a default playlist playing all the time.  When myself, my kids, or anyone comes in to house they can have priority over my laptop to play their music.  Then when they disconnect, stop playing music, or leave the house; the default playlist kicks back on and continues to play out the speakers via the airport.  I am trying to do this without human manual interaction.
    I can do all of this manually like disconnect laptop, new device syncs to airport, then when they leave manually start playlist.  But I am trying to figure out how to do this dynamically without human interaction.
    Any ideas or solutions on how to get this to work?
    Thanks!
    T.

    Hello,
     I'm either blind or over-worked (probably both) but I can't seem to find how to setup a DMZ on the XTM 330. I need to add an Avaya IP phone system and don't want to try using SIP because the vendor said they need no NAT.
    Can someone please either direct me to the correct spot in the documentation or tell me how to do it?
    Thanks in advance
    This topic first appeared in the Spiceworks Community

  • How to setup a static multicast ARP entry with Cisco SF300-08?

    We're running a cluster in multicast mode as a  loadbalancer.
    We have Cisco SF300-08 and when we adding a static ARP entry results in an error message telling the user that the hardware address needs to be a valid  unicast MAC address.
    So how to setup a static multicast in Cisco SF300 or maybe someone know other solution to setup multicastes mode in Cisco SF300.

    Hi, Tom!
    We have two watchguard xtm505(cluster active-active) in our network. Watchguard interfaces have one ip and one mac adresses. IP 192.168.111.1(Unicast) and MAC 01:00:5e:02:02:03(multicast).  Cisco SF300 is router to outside networks(to internet). Cisco IP adresss is 192.168.111.254. There are another some hosts in this network.
    Ping from hosts to 192.168.111.254 works well. Ping from hosts to 192.168.111.1 works well too.  But there is no ping from watchguard cluster(192.168.111.1) to Cisco(192.168.111.254). And there is no routing to internet
    This is well-known situation. We need to do following(example for cisco 3750):
    1.    Start the Cisco 3750 command line interface.
    2.    Add a static ARP entry for the multicast MAC address of the FireCluster interface.
    Type this command:
    arp arpa
    For this example, type:
    arp 192.168.111.1 01:00:5e:02:02:03 arpa
    3.    Add an entry to the MAC address table.
    Type this command:
    mac-address-table static vlan interface <#>
    For this example, type:
    mac-address-table static 01:00:5e:02:02:03 vlan 1 interface gi1/0/11
    But we can't add arp entry on Cisco SF300. CLI tells us "MAC address illegal"!
    We tried enable igmp snooping, but is not helps.
    Could you tell more detailed about MAC groups?

  • How to setup three SharePoint sites on one server?

    Hello,
    How to setup three SharePoint sites on one server?  I have three sites like:
    http://site1
    http://site2
    http://site3
    And need to have them running up on one server. I recall some changes need to be done to the host file, but not sure.  Can you advise on what to change?
    Thanks,
    Paul
    Paul

    you need to make entries in DNS to get this done.
    check here:http://spshare.blogspot.com/2012/05/how-to-create-host-header-web.html
    nice blog with step by step explanation:
    http://thuansoldier.net/?p=1323
    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

  • How to setup multiple base station under one network?

    How to setup multiple base station under one network? I have 6 rooms but one airport base station makes really difficult to get good signal from every rooms. I wonder if I can setup multiple airport base stations talking to each other under the same network to build up the signal strength will help solve this problem. But, is it possible? How?

    One route would be to utilize a "roaming" network. In a roaming network, you would connect multiple AirPort Extreme Base Stations (AEBS) to the same Ethernet. Of course, this would require that your home is already wired for Ethernet.

  • How to Setup SSL on Oracle Application Server 10g Release 2 (10.1..2)

    Hi All,
    Can anybody tell me How to setup the SSL on Oracle Application Server 10g Release 2 (10.1.2).
    I have all the required documents like
    1. Oracle Application Server Portal Server Configuration Guide.
    2. Oracle Application Server Web Cache Configuration Guide.
    3. Oracle Application Server SSO Administration Guide.
    I tried to follow all this documents but still i am not able to set SSL for Oracle Portal Server.

    The Portal Configuration Guide, available on OTN at http://www.oracle.com/technology/documentation/appserver1012.html does provide some very specific information on how to set up OracleAS Portal.
    Section 6.3.2.1 Configuring SSL for OracleAS Portal describes various configurations, such as:
    SSL to OracleAS Single Sign-On
    SSL to OracleAS Web Cache
    SSL Throughout OracleAS Portal
    External SSL with Non-SSL Within Oracle Application Server
    For larger enterprise configurations, you can refer to the Enterprise Deployment Guide.
    Can you give a bit more background on what you are trying to set up? Which scenario, what sort of hardware, software versions, and so on.
    Regards,
    Pete

  • How to setup a static IP for a wireless printer

    This problem has been ongoing for several versions of OS X and the last five printers I've had and I'm finally over messing with it.  For some reson, when using a wireless printer with OS X this is a repetetive problem, and I think if I configured the printer to a static IP address instead of using DHCP, it might work better.  At least once a week, if not more often, I'll print something and get the ubiquitous Dock error of "Printer is not connected".  The printer is still in Preferences, but if I delete it, then it doesn't show up as it should for selection.
    The only way to fix this is reboot, and then the printer shows up again in Preferences.  I select it and all is well again...until a few days pass and the same thing happens again.  Using an HP LaserJet P1102w, still a current model, but it doesn't matter which printer I use.  I also have an Epson Artisan 725 and the same thing happens with it about once a week.  Also, this happens from both my Mac and my wife's Mac, so it's not an issue with just my machine.
    I've searched for documentation on how to setup a static IP address for a wireless printer with the Airport Extreme, but all I find are tutorials on how to do it with an ethernet hard-wired printer.  Any help would be greatly appreciated.

    You could set up your router to do manual assignment of IP address instead of using DHCP, but that is a PITA, because then you'd have to manually set up IP for all your devices.
    If you have AirPOrt Extreme, you could do this:
    In your Apple TV, go to the Settings >> About and write down the MAC address of your ATV
    Start up the AiPort Admin Utility
    Go to Network tab
    click + in the DHCP reservations
    Choose an IP you want for your ATV & Enter the MAC address
    From now on, this IP address will be reserved to the MAC address and only your ATV will be able to get it, no other device will.
    It is not a static IP in a true sense, but behaves just like one.
    Works great for me...
    If you don't have a AP Extreme, I'm sure other routers will allow you do reservations too.

  • How to setup Charms in a 2 tier landscape ?

    Hi All,
    We have a two tier landscape i.e only having development and production system so how to setup STMS and all other settings in this type of scenario.
    Can we use Virtual system in STMS as a Quality system ? If yes then please guide us and tell me how to proceed as if we dont know how to add virtual system in SMSY in solman. Please provide us with a clear picture and give us detail documentation if possible.

    Hi All,
    Please tell me as per the SAP standard recommendation is it necessary to have a cycle like DEV->QUAL-PROD for Charms as we are not having any Quality system or Client here in our landscape.
    Please suggest a way how to proceed in this case. Please help me out.

  • How to setup breakpoints in a vector space?

    Hi,
    How to setup breakpoints in a 2D vector space in NI 7344 and check for them using flex_read_breakpoint_status_rtn?
    Thanks.

    Hi,
    Is Office Communicator something to do with the Word, Exel and Powerpoint Office Package ?
    What sort of Screen Names or IDs do you use with that ?
    If these are MSN/Live accounts names then it can be made to work for Text Chats but not Video or Audio Only chats
    10:38 PM      Friday; April 20, 2012
    Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
      iMac 2.5Ghz 5i 2011 (Lion 10.7.2)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
    "Limit the Logs to the Bits above Binary Images."  No, Seriously

  • How to setup iChat in a office

    How to setup iChat in a office that using Office Communicator as a IM ?

    Hi,
    Is Office Communicator something to do with the Word, Exel and Powerpoint Office Package ?
    What sort of Screen Names or IDs do you use with that ?
    If these are MSN/Live accounts names then it can be made to work for Text Chats but not Video or Audio Only chats
    10:38 PM      Friday; April 20, 2012
    Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
      iMac 2.5Ghz 5i 2011 (Lion 10.7.2)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
    "Limit the Logs to the Bits above Binary Images."  No, Seriously

  • How to Setup Historical DSC Database on a standalone Server

    Hey @all,
    I am looking for documentation how to setup a standalone server for the DSC Module(Ver. 8) Historical Database.
    My aim is to log all data to this server. The Server will be running Win2K.
    Do I have to install the complete Labview 8 software and the DSC Module?
    Does a walkthrough exist how to setup a DSC server?
    Thx!
    Carsten  

    After installing the runtime you should only have to reboot the computer in order to get the citadel service running.  At the point, for citadel purposes, this machine will behave as though you had the DSC development system installed.  The 8.0 runtime has no setup requirements...it should only need to be installed.  Unlike previous versions, 8.0 requires you to build your application into an executable and the runtime should be invisible to you once you install it.  If this is not the case, please post about it so it can be looked at.
    If you have specific questions, please post them and I will either try and help you find the answers, get them posted, or answer them myself.
    Regards,
    Robert

  • How to setup the security based on roles in Organization.

    Hi,
    How to setup the security based on roles in Organization.
    For example:Few users are Manager and a few user are Non Manager .Manager should have access to all work data including Non Manager and Non Manager should access based role.How to setup this? How OBI server identify the user role?
    kindly let me know.
    Regards.,
    CHR

    Hi,
    You need to have Back End support to achieve this. In Back End you need to create two groups . You need to know what joins has to be made for which group (which is more important) and also make session variable for the userrole (with SQL supporting it). In the BMM layer, we need to put the security join conditions in the 'where clause'.
    And make a common report. User loggin in with the respective userid will have userrole and joins assigned in the Back end. And they will be viewing the report according to their access.
    Hope this will solve your problem.
    Regards
    MuRam

  • How to Setup JMS in Siebel Server

    Hi
    Currently we have a Requirement to work with queuing System from JMS Queuing
    How to Setup the JMS Queuing from Siebel Point of view?
    Does JMS Should be Installed in Siebel Server?
    Plz Provide Inputs for How to Set up the JMS Queuing Mechanism and Setting up the Queues for Posting and Receiving the Messages from JMS Queues
    Thanks & Regards
    Rajendra Prasad

    Update - it works ! At least I can connect to Mountain Lion (not server) from my iPhone using the VPN Server Configurator app.
    Here's what I did :
    1) download the app and install
    2) setup using the help files on the web page : http://www.greenworldsoft.com/product-vpn-server-help.html
    3) at the last stage you need to setup port forwardin on your router
    4) under Airport Utility 6.0 you cannot setup ports 500 or 4500 due to BTTM conflicts but setup the other 2 ports (1723 TCP and 1701 UDP), update airport extreme
    5) download Airport Utility 5.6 from here : download already extracted utility  it is in it's extracted form as is necessary under Mtn Lion (thanks to NetUse Monitor for the download - great app by the way)
    6) run 5.6 and setup port forwarding (Advanced-Port Mapping) for the other 2 ports (500 and 4500 UDP), update airport extreme
    7) that's it, I was able to connect to the VPN from my iPhone !

  • How to setup word docs, converted to PDF on local drive with links to a second file at a page

    how to setup word docs, converted to PDF on local drive with links to a second file at a page
    Need to setup a set of word documents, converted to PDF that has links from one file to a second file at a given page.
    I would like to setup a set of pdf documents, on the hard disk of a PC or Mac, that can be open with acrobat pro running on the same computer and have the link jump to, and open in a new window, in acrobat pro, to a given page of a second document in the set.
    Is there a way to setup a link in word and the conversion to pdf that will result in a link that is equivalent to the acrobat link type  you get when you add a link of the type Go to a page in another document?
    Tools-Advanced Editing-Link tool, make a box
    Check: Go to page view, Next (Create go to view dialog opens)
    Open second document and go to page
    Click “Create go to view dialog” to set up link
    Result is a link, when view by link properties, with an action of
    Go to a page in another document
    File: C:\My Documents\second file.pdf
    Page: 43
    Zoom level: Custom
    I got close but did not solve the problem:
    I have a version that uses links to a website, using #page=43 at the end of the hyperlink.
    That works but will only open to the page if is through the web browser, opening the acrobat reader plugin.
    I need to open from a folder on the local harddisk (with relative links), in acrobat pro to the given page of the pdf, on a PC or a Mac.
    I could bookmark each page “pagenumberxxx” and jump to the bookmark/page if that would get around some problem
    Current Systems in use to create documents with links and view them:
    Windows XP SP3
    Word 2003 SP3
    Acrobat 9 pro version 9.4.4
    Or just to view them:
    Mac OS 10 Lion version 10.7.4
    Acrobat 9 pro version 9.5.1
    (note I have limited understanding of Mac’s)
    John

    No.  There seems to be no automated way to do it.  You can of course go into the PDF and manually add links after you have converted to PDF, but that is what we want to avoid having to do.  We want it to be automatic from the Word doc.

Maybe you are looking for

  • Graphics card for 2 monitors with TV out function

    I would like to use my H500s as the centerpiece of a Media Center. To do this it seems that  I need a new graphics card that will support at least 2 TVs/Monitors (3 would be even better). The first one is easy, my newer 50 inch TV hooks right up, but

  • How to see what data fields are linked to

    OK, not sure if that is even how to ask for what I am looking for. I am using Jetform Design version 5.3. There is a file at my company that was created before I took over as Systems Admin and one of the fields is cutting off the test string.  It is

  • Can Photoshop or Lightroom utilize double-precision capable GPUs for photographic image editing.

    Hello - I need to upgrade my graphics card.  Question can either Photoshop CS5 or Lightroom 5 utilize doubleprecision capable GPUs?  Thanks much for your help. Background: Application- photographic RAW files editing (no video editing.) Software- Phot

  • MOD and MOI files on Panasonic camcorder

    Hi there, Im borrowing a SDR-H86 camcorder. I have taken some footage and want to copy the files to my iMac. From the advice in the cam's manual, I have navigated to the DCIM folder. There is one folder there: 107CDPFQ which should contain the movies

  • Shrink system tablespace, or any laternate to reduce disk space usage!

    Dear All, My Database is 11gR1 and Linux is the operating system. My System tablespace is consuming 24,000 MB disk space, The user i have created that contain all the objects is another tablespace. I just want to know is there any way to shrink syste