Configure a Firebox External Network

Applies To: Cloud-managed Fireboxes

For a cloud-managed Firebox, an external network specifies settings for how the Firebox connects to a network that is not protected by the Firebox, such as the Internet. External network settings specify which interfaces connect to the external network, how the Firebox gets an external IP address.

To maintain a connection to WatchGuard Cloud, the Firebox configuration must have a valid external network and DNS server.

If a change to the Firebox configuration or external network causes the Firebox to lose the connection to WatchGuard Cloud, you can use the Web UI on the Firebox to recover the connection. For more information, see Recover the Firebox Connection to WatchGuard Cloud.

An External network is in the External zone. It is a member of the built-in alias Any-External. For more information about aliases, see Configure Firebox Aliases.

Edit or Add an External Network

By default a cloud-managed Firebox has one external network. You can edit the default external network and add additional networks.

To open the Networks configuration, from WatchGuard Cloud:

  1. Select Configure > Devices.
  2. Select the cloud-managed Firebox.
  3. Click Device Configuration.
  4. Click the Networks tile.
    The Networks configuration page opens.

Screen shot of the Networks tiles on the Networks configuration page

To edit an External network, from WatchGuard Cloud:

  1. On the Networks page, click the tile of the external network to edit.
    The network configuration page opens.
  2. Configure the network settings, as described in the next section.
  3. To save configuration changes to the cloud, click Save.

To add an External network, from WatchGuard Cloud:

  1. At the top of the Networks page, click Add Network.
  2. From the drop-down list, select Add External Network.
    The Add External Network page appears.

  1. In the Name text box, type a name for the network.
  2. Configure other network settings as described in the next section.
  3. To save configuration changes to the cloud, click Save.

Configure Network Settings

In the Network tab, you can configure the network IP address, VLAN settings, and associated interfaces.

Configure Network IP Address Settings

For an External network, you can assign a static IP address, or you can configure the Firebox to use DHCP or PPPoE to get an IP address.

Configure VLAN Settings

You can configure an external network as a virtual local area network (VLAN). When you enable VLAN for a network, you specify the VLAN ID. All interfaces associated with the network are configured to handle untagged VLAN traffic by default.

An external network cannot send and received untagged VLAN traffic.

After you enable VLAN for an external network, you must edit each interface to change it to handle tagged VLAN traffic for this network.

For more information, see Configure Firebox VLANs.

Configure Network Interfaces

In the network settings, you select which Firebox interfaces are associated with the network.

When you add an External network, the lowest numbered available interface is automatically associated with the network.

In the settings for a network, the Interfaces section shows which interfaces are currently associated with the network, and which are available.

Screen shot of the Interfaces settings for a network

The interface icon color indicates interface status in relation to this network.

White interface icon Interface is associated with another network
Blue interface icon Interface is associated with this network
Gray interface icon. Interface is available to associate with this network

To see associated networks for an interface, point to View Networks for the interface.

By default, all interfaces are associated with a network. Before you can associate an interface with a different network, you must remove that interface from the network it was previously associated with.

If you associate more than one interface with a network, network traffic is bridged between all associated interfaces.

To configure the interface settings for a network, from WatchGuard Cloud:

  1. In the tile for an associated or available interface, click .

  1. Select one of these options:
  • No Traffic — Remove the interface from this network.
  • Add Network Traffic — Add the interface as the first interface associated with this network.
  • Bridged Network Traffic — Add this interface to a network that already has another associated interface or SSID.

For a VLAN, the interface options are Untagged VLAN or Tagged VLAN. For more information, see Configure Firebox VLANs.

Configure Link Monitoring

On the Link Monitoring tab, you can enable link monitoring. When link monitoring is enabled, the Firebox sends traffic to a link monitor target to test network connectivity.

For more information, see Configure Firebox Network Link Monitoring.

Configure Dynamic DNS

On the Dynamic DNS tab, you can enable dynamic DNS (DDNS) and configure a connection to a DDNS service provider. WatchGuard Cloud supports several DDNS service providers.

For more information, see Configure Dynamic DNS.

Configure Advanced Settings

On the Advanced tab you can configure these network settings:

  • Web UI Access
  • Ping
  • MAC Access Control
  • Secondary Networks

For more information, see Configure Advanced Network Settings.

See Also

About Firebox Networking Settings