[FW-1] secureplatform, VLANs & Hide NAT

["Covington, Chris" <ccovington@FW1-NOSPAMPLUSONE.COM>]

Title: Message

Hi all,

 

I'm testing out a SecurePlatform FP3 Edition 2 system and I'm having issues getting it to route through my internal router which has 4 VLANs.

 

The firewall's internal IP is 192.168.2.2, the router's IP is 192.168.2.1 (and 192.168.3.1, 192.168.4.1, 192.168.5.1) and its default gateway is the firewall's internal IP.  It seems that FW-1 thinks that only its VLAN 192.168.2.0 is behind the internal interface, and the other VLANs are external networks (at least in that SmartDashboard diagram, which may mean nothing).  How do I let FW-1 know these VLANs are internal networks attached to its internal interface?

 

Also, in terms of routing, to route to these internal VLANs I've given the OS static routes (192.168.3.0 255.255.255.0 192.168.2.1, 192.168.4.0 255.255.255.0 192.168.2.1, etc.).  Is that all I need to do?

 

For Hide NAT:

 

Let's say I wanted all 4 of these VLANs, 192.168.2.0, 192.168.3.0, 192.168.4.0, 192.168.5.0, to have a Hide NAT all behind the same public IP address.  Should I define each network separately and give them each a Hide NAT with the same IP address, or would I only define an Address Range (192.168.2.0 - 192.168.5.0) and give that the Hide NAT, and not define the networks individually?  Or some combination therein?

 

thanks for any help,

Chris