Port Forwarding and Assigned IPs on TZ 350

Nekton

I am considering purchasing a TZ 350 for a SMB client of mine.

They have special requirements that require port forwarding and assigning fixed IP addresses on the LAN. Does the TZ 350 allow this?

I tried to find an administrator's manual online so I could look this up myself but could not find one; just a quick start guide.

Thanks in advance.

TKWITS

The quick answer is yes, the TZ350 is more than capable of what (I think) you are asking. But so are consumer 'routers'.

Saravanan

Hi @NEKTON,

Thank you for visiting SonicWall Community.

Yes, you should be able to achieve that requirement. All SonicWall firewall models can support your requirement.

Please refer below web-link for port forwarding config info on SonicWall.

https://www.sonicwall.com/support/knowledge-base/how-can-i-enable-port-forwarding-and-allow-access-to-a-server-through-the-sonicwall/170503477349850/%20

Hope this helps.

TKWITS

let me google that for you....

https://www.sonicwall.com/support/knowledge-base/how-can-i-create-a-static-dhcp-entry-in-the-sonicwall-utm-appliance/170504925446054/

TKWITS

Plan your network addressing. Rely on defaults and you'll run into things like this. Using an entire subnet for DHCP is silly and lazy.

Everyone has their own way of doing things, but I allocate the least addresses to DHCP. Yes you may run into situations where there are no addresses available to a new device connecting, but it is also a little bit of security knowing a random infected device connected to the network may not get an address (and thus not spread its infection). So start DHCP at an address that will be above the highest static ip address. Leave room for growth between your chosen statics and DHCP.

Static DHCP entries on a Sonicwall do not replicate the way Windows Server handle DHCP reservations. Yes they accomplish the same goal, but they are entirely different.

Nekton

https://community.sonicwall.com/technology-and-support/discussion/comment/8911#Comment_8911

This is the very type of information I was looking for! Thank you! Is there a knowledge base article on setting up the TZ 350 to assign static IP addresses in the LAN zone?

Nekton

Thank you. I was using the Search function within the community forum board. Still learning the best way to get to information as I consider purchasing this product. Appreciate your patience and help.

Micah

Hello @Nekton,

I hope you are well.

You can also use our global search tool if you are looking for specific information. Just let us know how we can help!

https://www.sonicwall.com/search/#t=Support&sort=relevancy&f:@language=%5BEnglish%5D

Nekton

I ended up purchasing the 350 TZ and have been making use of the links above and the online documentation.

I went through the quick configuration to set up the device as a gateway. The internal LAN is a 192.168.2. range with a mask of 255.255.255.0. When I try to create the static DCHP scope settings for an address, let's say 192.168.2.38, I get an error that says Error: [192.168.2.38 - 192.168.2.38] overlaps with entry [192.168.2.2 - 192.168.2.254].

Should I try to break up the DHCP scope into several or start the DHCP at an address that will be above the highest static ip address I need to use?

I though by creating a static scope for an address it would just pull it from the pool of DHCP leases but I guess I have that wrong.

Thanks in advance.