topic Two Layer 3 Interfaces on 1500 in Spark Firewall (SMB)

Two Layer 3 Interfaces on 1500

_Daniel_ — Mon, 16 Dec 2019 03:03:29 GMT

Hi G_W_Albrecht,

I've been reading through the 1500's documentation to see if it fits our requirements but couldn't find a solid answer.

We need to create two layer 3 interfaces (inside and a single DMZ), -no direct internet link/access- couple of static routes, 3-4 rules with one of them using IA and managed centrally.

Will a 1550 be able to address the above, mainly the two layer3 interfaces?

Cheers

Daniel

Re: Two Layer 3 Interfaces on 1500

PhoneBoy — Mon, 16 Dec 2019 03:09:00 GMT

I forked this from the announcement thread.
Even if this gateway doesn't have Internet access, you'd should be able to accomplish this.
I assume the "WAN" link could effectively be used as the DMZ in this case, particularly if there is no Internet access.
And yes, it can be centrally managed, or will be once R80.40 ships and/or management of 1500 series appliances is integrated into the R80.30 JHF.

Re: Two Layer 3 Interfaces on 1500

Maarten_Sjouw — Mon, 16 Dec 2019 05:52:10 GMT

There is one issue that you will run into, unless this has been resolved in the R80.20 software, that is that you cannot set a default route to any other interface than the internet interface.
The way around this is by adding 2 routes:
route 0.0.0.0 128.0.0.0 to the nexthop and
route 128.0.0.0 128.0.0.0 to the nexthop.
You can use the DMZ interface for the DMZ and any LAN interface for the other.

Re: Two Layer 3 Interfaces on 1500

G_W_Albrecht — Tue, 17 Dec 2019 10:52:17 GMT

15x0 can currently be centrally managed by R80.30 JT 111 !