Configure Additional Interfaces with a Static IP
You only require additional interfaces if you are configuring the appliance as a Secure Forwarder.
If you want to configure the dp1 and mp interfaces, you must get the IP, gateway, and netmask of the two interfaces. Use one of the following two methods to get the IP, gateway, and netmask of dp1 and mp interfaces.
Using the CLI
You must enable DHCP on the two interfaces. In CLI's configuration mode, run:
set interface dp1 dhcp enable true save exit
or,
set interface mp dhcp enable true save exit
Make a note of the IP, gateway, and netmask. In CLI's operation mode, run:
run show route interface dp1
or,
run show route interface mp
For example,
dp1 (eth1): ip - 172.31.10.237, gw - 172.31.0.1, netmask - 255.255.240.0
mp (eth2): ip - 172.31.3.125, gw - 172.31.0.1, netmask - 255.255.240.0
Disable DHCP on the interface. In CLI's configuration mode, run:
set interface dp1 dhcp enable false
or,
set interface mp dhcp enable false
Using AWS
In the EC2 Management Console on AWS, navigate to Instances and select the VA AMI instance.
In the instance description below, click on eth1 and eth2 network interfaces. Make a note of the Private IP Address of the two interfaces.
For example, eth1: Private IP Address 172.31.10.237 and eth2: Private IP Address 172.31.3.125
Under AWS Services, navigate to Networking & Content Delivery and click VPC.
In the left navigation pane of the VPC Dashboard, click Subnets .
Select your subnet. From the Summary below, note the IPv4 CIDR. The gateway address is the first valid IP address in this range.
For example, IPv4 CIDR: 172.31.0.0/20, gw - 172.31.0.1
In the Route Table tab of the subnet, note the destination IPv4 CIDR. Calculate the netmask.
For example, Destination 172.31.0.0/16, calculated netmask - 255.255.240.0
Configure the Interfaces
Using the IP, gateway, and netmask information for dp1 and mp interfaces, in configuration mode run the following commands,
set interface dp1 dhcp enable false set interface dp1 static ip enable true set interface dp1 static ip 172.31.10.237 set interface dp1 static gw 172.31.0.1 set interface dp1 static netmask 255.255.240.0 set interface mp dhcp enable false set interface mp static ip enable true set interface mp static ip 172.31.3.125 set interface mp static gw 172.31.0.1 set interface mp static netmask 255.255.240.0 save
You can use the show
command in configuration mode to verify your configuration.