Watchguard External Interface Setup

[andyatthowe]

Hi,

I am setting up my first Watchguard device which is a XTM 2 series device (XTM22). I have two WAN connections I want to use with this. One is an existing ADSL line with 5 static IP addresses and a ISP managed cisco router, the other is a new dedicated IP Feed also with 5 static ip addresses and an ISP managed router. Both are provided by the same ISP, using the same DNS servers. I have the watchguard configured in mixed routing mode, I have the first interface configured as external with the details of the ADSL connection. The second interface as the trusted internal nertwork, when I try to configure the IP Feed on another interface I run into an issue. I set it up as an external connection, enter all the details but when I try to save it comes back with error 126 it is in the same subnet as the ADSL interface. How can I get round this and set it up how I want, which is the IP Feed as the main connection and the ADSL to kick in if the IP Feed drops?


ADSL IP: 212.2.*.*

IP Feed: 212.30.*.*


Thanks


Andy

 

[hairlessupportmonkey]

Is one a leased line? If so, shouldn't the ADSL be connected to the managed router on the Leased Line?

Anyway, I just tried this on an XTM25 on 11.6.1 and it didn't complain. I have to admit, it didn't have a multi-wan licence, but it didn't complain during the configuration.

Can you send me the config? (use drop box or something)

ACSS - SME
General Geek

 

[andyatthowe]

Hopefully these links work and show you the current config and what I have entered and tried to save without success

https://www.dropbox.com/s/llih5aoiwv921mc/watchguard config 1.pdf

https://www.dropbox.com/s/llih5aoiwv921mc/watchguard config 1.pdf

https://www.dropbox.com/s/llih5aoiwv921mc/watchguard config 1.pdf

https://www.dropbox.com/s/llih5aoiwv921mc/watchguard config 1.pdf

 

[andyatthowe]

The new connection I am trying to setup is a leased line, I know both connections have their managed routers provided by the ISP. I was hoping to be able to use the leased line\IP Feed as always on and the main connection with the ADSL being plugged in and kicking in if the leased line drops (Based on a ping failover or similar).

 

[hairlessupportmonkey]

Oh I see your error - the /1 you are using for your mask bits!!!

if you have 5 IPs Im guessing a .248 net mask? so thats a /29 network!



ACSS - SME
General Geek

 

[andyatthowe]

Thanks you are spot on, I had got the configuration to go through using the policy manager instead of the web interface. I will edit it now, so should I use the /29 for all the ip's listed i.e. the main one on the interface and then the secondary ip's as well?

 

[hairlessupportmonkey]

yes.

ACSS - SME
General Geek

 

[andyatthowe]

Ok thanks alot life saver!

 

[hairlessupportmonkey]

If you need a company to do watchguards etc in the future - let me know

ACSS - SME
General Geek