Netgate 7100 - Testing; Configuring an OPT interface as an additional LAN; Requirements

Security Gateway Manual XG-7100
2.7.11 Testing
Methods for testing depend on the type of WANs and gateway groups in use.
• For most WANs, a better test is to unplug the upstream connection from the ISP Customer Premise Equipment
(CPE). This more accurately simulates a typical type of upstream connectivity failure. Do not power off the
CPE or unplug the connection between the firewall and the CPE. While this may work, it’s a much less common
scenario and can behave differently.
• For testing load balancing, use cURL or multiple browsers/sessions when checking the IP address multiple
times. Refreshing the same browser window will reuse a connection to the server and is not helpful for test-
ing connection-based load balancing.
2.8 Configuring an OPT interface as an additional LAN
Note: The default configuration has the ix SFP interfaces assigned as OPT ports. The switch ports may also be
configured as additional discrete OPT ports, see Configuring the Switch Ports for details.
This guide configures an OPT port as an additional LAN type interface. These local interfaces can perform a variety
of tasks, such as being a guest network, DMZ, IOT isolation, wireless segment, lab network, and more.
Configuring an additional LAN
• Requirements
• Assign the Interface
• Interface Configuration
• DHCP Server
• Outbound NAT
• Firewall Rules
– Open
– Isolated
• Other Services
2.8.1 Requirements
• This guide assumes the underlying interface is already present (e.g. physical port, VLAN, etc).
• Choose a new local subnet to use for the additional LAN type interface. This example uses 192.168.2.0/24.
© Copyright 2024 Rubicon Communications LLC 57