Otdfbt

Find hamming distance between two Strings of equal length in Java

How exactly does artificial gravity work?

declared variable inside void setup is forgotten in void loop

What information do scammers need to withdraw money from an account?

On what legal basis did the UK remove the 'European Union' from its passport?

Anabelian geometry ~ higher category theory

Tikzpicture in figure problem

How does emacs `shell-mode` know to prompt for sudo?

German characters on US-International keyboard layout

Wireless headphones interfere with Wi-Fi signal on laptop

Loading Latex packages into Mathematica

Is there ever any indication in the MCU as to how Spider-Man got his powers?

Why was Thor doubtful about his worthiness to Mjolnir?

Help in identifying a mystery wall socket

What to do if SUS scores contradict qualitative feedback?

Why does the headset man not get on the tractor?

How do employ ' ("prime") in math mode at the correct depth?

Do I need to say 'o`clock'?

Can a tourist shoot a gun in the USA?

Longest Text in Latin

Conditional probability - sum of dice is even given that at least one is a five

return tuple of uncopyable objects

Automatically anti-predictably assemble an alliterative aria

What's the difference between "за ... от" and "в ... от"?

Watchguard config, drop-in or mixed-routing mode?

configure pppoe on wrt54gl(openwrt)Watchguard SSL Certificate problemsWatchguard Firewall - bridge a public IP to another interface?Connect from firewall to Cisco 877 in Bridged modeCan Watchgurard XTM 520 support 2nd network drop?Watchguard Firewall - Issues with SSLVPNWatchguard XTM Internal Policy DenialNetwork Performance Issues w/ Watchguard XTM 23Clients intermittently cannot reach internal server, Windows network with Watchguard XTMCan we use a ADSL2+ modem in bridged mode to convert to ethernet WAN?

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

2

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. The reason I am curious about drop-in mode is because I would like to use all the interfaces on the back of the watchguard for the same subnet.

My understanding is that drop-in mode will put them all on the same subnet, but it is unclear from the manual that the routing/firewall/vpn will still work as expected.

This WG is right behind a DSL modem that is setup in bridge mode, so the WG is handling all PPPoE auth and routing for the network.

networking firewall router watchguard

share|improve this question

asked Aug 11 '10 at 3:16

vfilbyvfilby

142239

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  I believe it used to be that if it is drop-in the everything is bridged and you can't do routing, but I haven't used a Watchguard for about 5 years.
  
  – Zoredache
  Aug 11 '10 at 7:21
  

  
  
  
  

add a comment | 

2

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. The reason I am curious about drop-in mode is because I would like to use all the interfaces on the back of the watchguard for the same subnet.

My understanding is that drop-in mode will put them all on the same subnet, but it is unclear from the manual that the routing/firewall/vpn will still work as expected.

This WG is right behind a DSL modem that is setup in bridge mode, so the WG is handling all PPPoE auth and routing for the network.

networking firewall router watchguard

share|improve this question

asked Aug 11 '10 at 3:16

vfilbyvfilby

142239

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  I believe it used to be that if it is drop-in the everything is bridged and you can't do routing, but I haven't used a Watchguard for about 5 years.
  
  – Zoredache
  Aug 11 '10 at 7:21
  

  
  
  
  

add a comment | 

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. The reason I am curious about drop-in mode is because I would like to use all the interfaces on the back of the watchguard for the same subnet.

My understanding is that drop-in mode will put them all on the same subnet, but it is unclear from the manual that the routing/firewall/vpn will still work as expected.

This WG is right behind a DSL modem that is setup in bridge mode, so the WG is handling all PPPoE auth and routing for the network.

networking firewall router watchguard

share|improve this question

asked Aug 11 '10 at 3:16

vfilbyvfilby

142239

share|improve this question

asked Aug 11 '10 at 3:16

vfilbyvfilby

142239

share|improve this question

asked Aug 11 '10 at 3:16

vfilbyvfilby

142239

asked Aug 11 '10 at 3:16

vfilbyvfilby

142239

asked Aug 11 '10 at 3:16

vfilbyvfilby

142239

1 Answer
1

active

oldest

votes

0

We have a xtm21-w and according to the docs in drop-in mode all the interfaces are on the same network.

From the watchguard online docs

In drop-in mode:

• You must assign the same primary IP address to all interfaces on your Firebox or XTM device (external, trusted, and optional).


• You can assign secondary networks on any interface.


• You can keep the same IP addresses and default gateways for hosts on your trusted and optional networks, and add a secondary network address to the primary external interface so your Firebox or XTM device can correctly send traffic to the hosts on these networks.


• The public servers behind your Firebox or XTM device can continue to use public IP addresses. Network address translation (NAT) is not used to route traffic from outside your network to your public servers.

The properties of a drop-in configuration are:

• You must assign and use a static IP address on the external interface.


• You use one logical network for all interfaces.


• You cannot configure more than one external interface when your Firebox or XTM device is configured in drop-in mode. Multi-WAN functionality is automatically disabled.

share|improve this answer

answered Jun 30 '11 at 15:03

slmslm

5,136124360

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f169114%2fwatchguard-config-drop-in-or-mixed-routing-mode%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

We have a xtm21-w and according to the docs in drop-in mode all the interfaces are on the same network.

From the watchguard online docs

In drop-in mode:

• You must assign the same primary IP address to all interfaces on your Firebox or XTM device (external, trusted, and optional).


• You can assign secondary networks on any interface.


• You can keep the same IP addresses and default gateways for hosts on your trusted and optional networks, and add a secondary network address to the primary external interface so your Firebox or XTM device can correctly send traffic to the hosts on these networks.


• The public servers behind your Firebox or XTM device can continue to use public IP addresses. Network address translation (NAT) is not used to route traffic from outside your network to your public servers.

The properties of a drop-in configuration are:

• You must assign and use a static IP address on the external interface.


• You use one logical network for all interfaces.


• You cannot configure more than one external interface when your Firebox or XTM device is configured in drop-in mode. Multi-WAN functionality is automatically disabled.

share|improve this answer

answered Jun 30 '11 at 15:03

slmslm

5,136124360

add a comment | 

0

We have a xtm21-w and according to the docs in drop-in mode all the interfaces are on the same network.

From the watchguard online docs

In drop-in mode:

• You must assign the same primary IP address to all interfaces on your Firebox or XTM device (external, trusted, and optional).


• You can assign secondary networks on any interface.


• You can keep the same IP addresses and default gateways for hosts on your trusted and optional networks, and add a secondary network address to the primary external interface so your Firebox or XTM device can correctly send traffic to the hosts on these networks.


• The public servers behind your Firebox or XTM device can continue to use public IP addresses. Network address translation (NAT) is not used to route traffic from outside your network to your public servers.

The properties of a drop-in configuration are:

• You must assign and use a static IP address on the external interface.


• You use one logical network for all interfaces.


• You cannot configure more than one external interface when your Firebox or XTM device is configured in drop-in mode. Multi-WAN functionality is automatically disabled.

share|improve this answer

answered Jun 30 '11 at 15:03

slmslm

5,136124360

add a comment | 

We have a xtm21-w and according to the docs in drop-in mode all the interfaces are on the same network.

From the watchguard online docs

In drop-in mode:

• You must assign the same primary IP address to all interfaces on your Firebox or XTM device (external, trusted, and optional).


• You can assign secondary networks on any interface.


• You can keep the same IP addresses and default gateways for hosts on your trusted and optional networks, and add a secondary network address to the primary external interface so your Firebox or XTM device can correctly send traffic to the hosts on these networks.


• The public servers behind your Firebox or XTM device can continue to use public IP addresses. Network address translation (NAT) is not used to route traffic from outside your network to your public servers.

The properties of a drop-in configuration are:

• You must assign and use a static IP address on the external interface.


• You use one logical network for all interfaces.


• You cannot configure more than one external interface when your Firebox or XTM device is configured in drop-in mode. Multi-WAN functionality is automatically disabled.

share|improve this answer

answered Jun 30 '11 at 15:03

slmslm

5,136124360

share|improve this answer

answered Jun 30 '11 at 15:03

slmslm

5,136124360

answered Jun 30 '11 at 15:03

slmslm

5,136124360

answered Jun 30 '11 at 15:03

slmslm

5,136124360