How to configure multiple LAN (Subnets) to 1 LAN Interface?

Hey Patrick,

Did you mean that Port 7 Interface should have these IP addresses on the interface that can act as a gateway for Local Machines? 

If these all are separate /24 subnets, You can achieve this by adding alias IP addresses on the LAN interface. Each alias interface can have a network of its own. But You can't add DHCP for these Alias interfaces.

-> How to configure Alias IP

You can keep Port 7 connected to a switch and use any internal DHCP or statically assign IP and gateway (Alias interface IP).

Thx for the help. This was, what i looking for :) Is it possible to add rules/groups to this alias ip  adresses?

Why not create rule groups on the switch and assign an ip range to a different port on the XG? I think with this approach you will find rule management simpler and so will debugging.

ian

You mean creating groups on the switch behind the XG? But for this, he must be managed or layer3, right?

You mean creating groups on the switch behind the XG? But for this, he must be managed or layer3, right?

Correct. A different approach would be one IP range because using the ranges shown would indicate that the networked devices have fixed addresses so they can be created into clientless groups to manage firewall access.

The VPNs are now provided by the XG so that network range is not required.

Ian

Thx for that. We have so much switches here, i think maybe thats a problem. (Switch after Switch) because of multiple houses and floors. Is it easier with VLAN's?

Really depends on whether your switches are L3 capable. With that many devices you should spread them across multiple interfaces which you can do with VLANs.

Ian