SonicOS 7 System

Table of Contents

Configuring General Settings for Virtual Interface

To configure general settings for a virtual interface

  1. Navigate to NETWORK | System > Interfaces | General.
  2. Select a zone to assign to the interface from Zone:
    • LAN
    • WAN
    • DMZ
    • WLAN
    • Custom zone that you have created
    • Create new zone. The Add Zone dialog is displayed. See About Zones for instructions on adding a zone.

    The options displayed change, depending on the Zone you select.

  3. From IP Assignment select:
    • Static (default for WAN)
    • Static IP Mode (default for LAN)

  4. Enter the IP address and subnet mask for the interface into the IP Address and Subnet Mask fields.

    You cannot enter an IP address that is in the same subnet as another zone.

  5. If configuring a:

    • WAN zone interface or the MGMT interface, enter the IP address of the gateway device into the Default Gateway field.

      A default gateway IP is required on the WAN interface if any destination is required to be reached through the WAN interface that is not part of the WAN subnet IP address space, regardless whether a default route is received dynamically from a routing protocol of a peer device on the WAN subnet. A default gateway IP is optional on a LAN interface.

    • LAN zone interface or a DMZ zone interface, optionally enter the IP address of the gateway device into the Default Gateway (Optional) field.

    The gateway device provides access between this interface and the external network, whether it is the Internet or a private network.

  6. If configuring a:
    • LAN zone interface, go to Configuring General Settings for Virtual Interface
    • WAN zone interface, enter the IP addresses of up to three DNS servers into the DNS Server fields. These can be public or private DNS servers. For more information, see Configuring a WAN Interface.
  7. Enter any optional comment text in the Comment field. This text is displayed in the Comment column of the Interface Settings table.

  8. If you want to enable remote management of the security appliance from this interface, choose the supported Management protocol(s): HTTPS, Ping, SNMP, and/or SSH. If HTTPS is chosen, Add rule to enable redirect from HTTP to HTTPS becomes available and selected; selecting HTTP, disables Add rule to enable redirect from HTTP to HTTPS, and it becomes dimmed.

    Elements of this feature can be controlled by internal User Authentication Settings options. For more information, see HTTP/HTTPS Redirection with DP Offload.

    To allow access to the WAN interface for management from another zone on the same security appliance, access rules must be created.

  9. If you want to allow selected users with limited management rights to log in to the security appliance, choose HTTP and/or HTTPS in User Login. If HTTPS is chosen, Add rule to enable redirect from HTTP to HTTPS becomes available and selected; selecting HTTP, disables Add rule to enable redirect from HTTP to HTTPS, and it becomes dimmed.
  10. Configure Advanced Settings; go to Configuring Advanced Settings for a Static Interface.

  11. Click OK.

    The administrator password is required to regenerate encryption keys after changing the security appliance’s address.