Netgate 8300 - Page 66

Security Gateway Manual Netgate-8300
2.7 Configuring an OPT interface as an additional LAN
This guide configures an OPT port as an additional LAN type interface. These local interfaces can perform a variety
of tasks, such as being a guest network, DMZ, IOT isolation, wireless segment, lab network, and more.
Configuring an additional LAN
• Requirements
• Assign the Interface
• Interface Configuration
• DHCP Server
• Outbound NAT
– Automatic or Hybrid Outbound NAT
– Manual Outbound NAT
• Firewall Rules
– Open
– Isolated
• Other Services
2.7.1 Requirements
• This guide assumes the underlying interface is already present (e.g. physical port, VLAN, etc).
• Choose a new local subnet to use for the additional LAN type interface. This example uses 192.168.2.0/24.
2.7.2 Assign the Interface
The first step is to assign an OPT interface.
• Navigate to Interfaces > Assignments
Look at list of current assignments. If the interface in question is already assigned, there is nothing to do. Skip
ahead to the interface configuration.
• Pick an available interface in Available network ports
If there are no available interfaces, then one may need to be created first (e.g. VLANs).
• Click Add
The firewall will assign the next available OPT interface number corresponding to the internal interface designation.
For example, if there are no current OPT interfaces, the new interface will be OPT1. The next will be OPT2, and so
on.
Note: As this guide does not know what that number will be on a given configuration, it will refer to the interface
generically as OPTx.
© Copyright 2024 Rubicon Communications LLC 64