topic SMO and Internet Traffic in Hyperscale Firewall (Maestro)

SMO and Internet Traffic

Simon_Macpherso — Thu, 05 Nov 2020 23:51:54 GMT

Hello,

Is a separate internet link required to be configured on one of the uplink ports for all traffic that is not SMO management traffic (Security Gateway configuration, policy installation, remote connections and logging) i.e. the SMO default route?

Regards,

Simon

Re: SMO and Internet Traffic

Chris_Atkinson — Fri, 06 Nov 2020 00:14:20 GMT

Multiple "internet" links are not required.

For hosts talking to the Mgmt IP of the Security Group their default route/gateway shouldn't be the Mgmt IP itself rather an intermediate switch/router which will direct internet traffic via the data ports of the Security Group.

Re: SMO and Internet Traffic

Simon_Macpherso — Fri, 06 Nov 2020 02:07:35 GMT

I’m assuming we can’t route non-SMO management WAN traffic over the management ports (eth1-Mgmt1, eth2-Mgmt1).

We intend to deploy a new external /24 IP range as part of this deployment.

Do we need to allocate two separate IP blocks for both the SMO and WAN connectivity?