¶ Multi-LAN Deployment Configurations
Exium support both Single-interface and Multi-interface versions for the Cyber Gateways deployment. However, the Multi-LAN support (as obvious) is only provided in the Multi-interface version. You can deploy the Cyber Gateways on Hardware, in a VM or on Public Cloud of your choice.
A Multi-WAN scenario where the hardware or VM supports multiple network interfaces is shown below. An example of recommended hardware for the Cyber Gateway that supports 4 physical network interfaces is HUNSN Micro Firewall Appliance.
A Multi-LAN deployment scenario with high-availability (HA) is provided below. In the HA deployment, we recommend using a switch on the WAN side as it simplifies the cabling and also accommodate cases where the ISP modem/ router provides only one or limited network interfaces for connectivity.
¶ Configuring Additional LAN Interfaces
To configure Multi-LAN support, follow the steps below.
- Navigate to the MSP admin console -> Client Workspace
- Click on Sites → Cyber Gateways in the left menu bar → Add Gateway
- Enter the subnet information in default LAN Interface subnet, Gateway IP and Next Hop IP
- LAN Subnet - Enter LAN subnet (for eg. 10.10.10.0/24). This will be added as Trustpath automatically to Gateway, so no need to add this as Trustpath again. VERY IMPORTANT: This is the subnet that will be behind the gateway (i.e. plugged into the LAN port of the gateway) that you want remote users to be able to access. This is NOT the subnet that the WAN port of the gateway is on.
- LAN Gateway - Specify IP address of the Gateway which will be used by the devices behind CGW in LAN subnet specified in above parameter. Configured LAN Gateway IP will be installed on the CGW machine, so make sure it is not conflicting in network or not installed on any other device statically. If HA (High Availability) is enabled, then do not use .251 and .252 IP addresses as LAN Gateway IP. These IP addresses will be installed on Primary and Secondary nodes respectively.
- Next HOP GW for LAN - Provide gateway for LAN traffic. It is required when LAN traffic has to send all traffic to an IP which handles communication with actual core LAN network.
- DHCP - Select DHCP option as Yes if DHCP server needs to be configured for that LAN Interface
- if DHCP selected as Yes Please update Start and End Range. Start Range and End Range show IP range that needs to be allocated by DHCP server to end users and devices in the LAN network. Default starting IP is x.x.x.2 and Ending IP is x.x.x.250 (in this example Starting DHCP IP: 10.101.23.2 and End ip: 10.101.23.250).
- For additional LAN Interface, Click on “+” as shown in picture add additional LAN Interface details (Subnet, Gateway IP, Next Hop Gateway and DHCP options.
- Click on “Save/Update”
- Please follow the instructions for Multiple interface CGW deployment for other configuration and deployment options
