This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to associate a block of Public IP addresses to a single WAN port

Hello Sophos community.  I know this is a pretty basic question, but I'm having a very difficult time finding a straight answer, and the UI isn't exactly intuitive in this case.  I have configured numerous firewalls in my time as an IT guy, from numerous providers including, Peplink, Adtran, and Fortinet, but they all seem to handle this differently.  The title says it all.  I have a block of 128 Public IP addresses that I need to associate to my WAN interface. There's no way we'll be using them all right away, but I'd like to have them available during the initial configuration for testing purposes. The WAN interface setup, as well as the Alias interface options both seem to have the same limitation; they only allow for a single address, albeit with the gateway and mask.  Do I need to add each individual address to the alias list, one at a time, or does the mask cover the range in the alias list, OR does it actually cover the range in the initial WAN setup?  

 

-Jeff



This thread was automatically locked due to age.
Parents
  • Hi Jeff,

     

    Good day!

     

    I'm with you. Yes correct Jeff you have to manually add to alias but I could suggest a work around creating an inbound firewall rule that will allow even ICMP service pointed to your public ip addresses.

     

    Warm Regards,

    Deo

  • Thank you for the reply!  I've been away from this box for the last couple of weeks so I'm just getting back to configuring it.  While I find it a bit time consuming to have to add each address, individually, I think that's going to be the best bet, at least for now.  I'll be sure to post back if I run into any problems after doing some testing.

Reply
  • Thank you for the reply!  I've been away from this box for the last couple of weeks so I'm just getting back to configuring it.  While I find it a bit time consuming to have to add each address, individually, I think that's going to be the best bet, at least for now.  I'll be sure to post back if I run into any problems after doing some testing.

Children
No Data