Configure a Shared Gateway

Perform this task if you need multiple virtual systems to share an interface (a Shared Gateway) to the Internet. This task presumes:
  • You configured an interface with a globally-routable IP address, which will be the shared gateway.
  • You completed the prior task, Configure Virtual Systems. For the interface, you chose the external-facing interface with the globally-routable IP address.
  • When configuring the virtual systems, in the
    Visible Virtual System
    field, you checked the boxes of all virtual systems that must communicate to be visible to each other.
  1. Configure a Shared Gateway.
    1. Select
      Device
      Shared Gateway
      , click
      Add
      and enter an
      ID
      .
    2. Enter a helpful
      Name
      , preferably including the
      ID
      of the gateway.
    3. In the
      DNS Proxy
      field, select a DNS proxy object if you want to apply DNS proxy rules to the interface.
    4. Add
      an
      Interface
      that connects to the outside world.
    5. Click
      OK
      .
  2. Configure the zone for the shared gateway.
    When adding objects such as zones or interfaces to a shared gateway, the shared gateway itself will be listed as an available vsys in the
    VSYS
    menu.
    1. Select
      Network
      Zones
      and
      Add
      a new zone by
      Name
      .
    2. For
      Location
      , select the shared gateway for which you are creating a zone.
    3. For
      Type
      , select
      Layer3
      .
    4. (
      Optional
      ) Select a
      Zone Protection Profile
      (or configure one later) that provides flood, reconnaissance, or packet-based attack protection.
    5. (
      Optional
      ) In
      Log Setting
      , select a log forwarding profile for forwarding zone protection logs to an external system.
    6. (
      Optional
      ) Select
      Enable User Identification
      to enable User-ID for the shared gateway.
    7. Click
      OK
      .
  3. Commit your changes.
    Click
    Commit
    .

Related Documentation