Configuring the WAN(s)

As a third step, configure the two WANs linked to the Data Center appliance: Internet and MPLS.

Refer to "Use Case 2" diagram where WAN1 (Internet) details are displayed in orange.

Activate the WAN through the

icon. You may now enter field data.

Select the Router option for this L3 interface.

Do not activate the DHCP function to proceed with Step 4.

Enter the WAN1 interface static information, 192.168.1.2 as IP Address, 24 as Prefix length. This address must be static to enable the configuration of Port Forwarding on the Internet Access router.

Enter the Default Gateway: 192.168.1.1

Define the Public IP address (133.3.3.3) which corresponds to the WAN side of the Internet Access router to which the WAN1 interface is connected. The Port Forwarding configuration of the Internet Access router enables this device to send the UDP packets to the appliance WAN1 on ports 500 (IKEv2) and 4500 (IPsec NAT Traversal). The Internet Access router also modifies the Egress packets in order to replace its 133.3.3.3 public address with the 192.168.1.2 WAN1 static address as destination address.

When configuring a WAN for the first time, type the name of the network you are connected to, 'Internet' in the current example. Clearly identify each name through customization. Once a Transport Network type has been defined, you can select it from the stack when configuring subsequent WANs.

This interface is automatically eligible to DTI (Inherited ON) because you globally activated this policy for the 'Internet' Transport Network (refer to Advanced Configuration -> Transport Network Settings). You may also manage DTI individually for this Internet L3 interface by checking the ON or OFF options.

Directly derived from the activated Eligible DTI option, keep the Enable NAT mode activated. This is a source-NAT where the LAN IP addresses (11.1.4.0 or 11.1.5.0) are replaced with the 192.168.1.2 WAN1 IP address. This NAT only applies to the traffic sent over the Internet. The traffic to the Branch Offices/Sites is transferred through the IPsec tunnels.

If you deactivate the Enable NAT mode which controls the firewall, incoming connections from the WAN are allowed to go to the LAN.

The Preference parameter is meaningless in this Use Case since there is only one Data Center appliance.

In the Access Bandwidth fields, define the up and down throughput (in kilobits per second) allocated to the WAN: 20000.

Enter the MTU value which corresponds to the maximum number of bytes loaded in the Payload. The default value is 1500.

Leave the Speed parameter to Auto to let the system define the speed of the interface, or you can force the speed to 100FD or 1000FD. The full duplex speed is expressed in megabits per second.

Note: The Internal Tunnels, External Gateways and Local Port Forwarding configuration panels are not used for this interface.

Refer to "Use Case 2" diagram where WAN2 (MPLS) details are displayed in green.

Activate the WAN through the

icon. You may now enter field data.

Select the Router option for this L3 interface.

Enter the interface information, 10.1.4.253 as IP Address, 24 as Prefix length.

Enter the Default Gateway: 10.1.4.254

Do not activate the DHCP function since the IP address of the WAN2 interface is static to enable the Branch Office appliances creating tunnels.

In the 'Public IP' field, re-enter the interface IP address (10.1.4.253) which is not public in this case but a private address in the addressing scheme of the MPLS private network.

Type 'MPLS' as Transport Network type.

Leave the Eligible DTI parameter to 'Inherited (OFF)'. It corresponds to your configuration in Advanced Configuration -> Transport Network Settings where you did not activate eligibility to DTI for MPLS interfaces.

Do not activate the Enable NAT mode since a private network is used (MPLS).

The Preference parameter is meaningless in this Use Case since there is only one Data Center appliance.

In the Access Bandwidth fields, define the up and down throughput (in kilobits per second) allocated to the WAN: 10000.

Enter the MTU value which corresponds to the maximum number of bytes loaded in the Payload. The default value is 1500.

Leave the Speed parameter to Auto to let the system define the speed of the interface, or you can force the speed to 100FD or 1000FD. The full duplex speed is expressed in megabits per second.

Validate your input by hitting the Create button.

If the appliance already exists and you modify any data, click the Update button.

Note: The Internal Tunnels and External Gateways configuration panels are not used for this interface.

In the Network -> Advanced Configuration window, add this 'DataCenter' hub appliance as Time Synchronization Server. Then click Update.

Also see how to configure:

Branch Office appliance WANs

a multi-appliance Data Center

a multi-appliance Branch Office Site