Network Settings (routing, interfaces, etc)

Question 1

Which sections are covered in this deck?

Answer 1

Network routing modes
DNS
Interface types and aliases
Network bridges
Secondary networks
VLANs
Multi-WAN
SD-WAN
Static routing
Dynamic NAT
Static NAT
1-to-1 NAT
Traffic management

Question 2

You can configure Network settings in three modes - what are they?

Answer 2

Mixed Routing - the only mode that allows you to use ALL Firebox features
Drop-In - some features disabled
Bridge Mode - some features disabled, and does not allow VPN configuration

Question 3

The Firebox starts in what Routing configuration? (Hint: it’s the most commonly used.)

Answer 3

Mixed Routing mode

NOTE: the Web Setup Wizard (WSW) automatically starts in Mixed Routing mode, while the Quick Setup Wizard in Watchguard System Manager (WSM) can be configured in either Mixed Routing or Drop-In mode

Question 4

In Drop-In mode, you can but do not need to have NAT, and all Firebox interfaces…

Answer 4

…have the same IP address.

Question 5

In Bridge mode, layer 2 and layer 3 data is not handled so you cannot configure…

Answer 5

…NAT, VLANs, or routing. But you can configure ONE interface to manage the Firebox.

Question 6

One of the basic functions of a firewall is to…

Answer 6

…move packets from one side of the firewall to the other. (This is Routing.)

Question 7

Firewall interfaces are of four types:

Answer 7

Any-External — An alias for any network reachable through a Firebox interface configured as external
Any-Trusted — An alias for any network reachable through a Firebox interface configured as trusted
Any-Optional — An alias for any network reachable through a Firebox interface configured as optional
Any — An alias for any address. This includes any IP address, interface, custom interface, tunnel, or user group.

Question 8

Exteranal Firebox interfaces can be configured to handle…

Answer 8

Dynamic DNS and IP fetched from external DHCP server or Point-to-Point Protocol over Ethernet (PPPoE) server, and Static IP

Question 9

The External interface has what alias and default route?

Answer 9

External interface is a member of Any-External alias, and default routing is called “Zero Route” and corresponds to 0.0.0.0/0

Question 10

Trusted interface alias is called what, and what connects to it?

Answer 10

Any-Trusted, and connects to the private LAN or internal resources you want to protect.

Question 11

Optional interface connects to…

Answer 11

…mixted trust or DMZ networks, public web, FTP, or mail servers. This is aliased to Any-Optional.

Question 12

The Custom interface is designated with the alias Any, and is used for…

Answer 12

…any connections that are not members of the other three types, and for which traffic is blocked except as specific policies allow.

Question 13

Most users configure at least one of these two interfaces:

Answer 13

Trusted and External

Question 14

Internal interfaces must be STATIC, and conform to:

Answer 14

RFC 1918 and RFC 8190 [memorization]

Question 15

Syntax for configuring internal network IPv4 addresses is:

Answer 15

Slash notation (network range 192.168.0.0 with subnet mask 255.255.255.0 would be defined on Firebox as 192.168.0.0/24)

Question 16

The Firebox is usually assigned as DHCP, but it can also be configured as…

Answer 16

…a DHCP Relay, enabling DHCP to be run from a device on a different network, then relays that to devices on Trusted, Optional, or Custom interfaces.