Configure WAN and LAN¶
This guide establishes reliable network baseline behavior.
1. Assign interfaces correctly¶
At console interface assignment:
- Map upstream interface to WAN
- Map internal interface to LAN
- Save and re-verify mapping
2. Configure LAN¶
- Set LAN IP/subnet
- Enable DHCP scope only if this firewall is DHCP authority for that segment
- Verify a client receives expected lease and gateway
3. Configure WAN¶
- Confirm address mode (DHCP/static/PPPoE)
- Confirm gateway and DNS path
- Validate default route points to WAN gateway
4. Validate end-to-end flow¶
- LAN -> firewall Web UI: pass
- LAN -> Internet IP: pass
- LAN -> DNS name: pass
- Firewall logs: no unexpected baseline blocks
5. Lock management access¶
- Keep management on LAN/trusted admin network only
- Avoid exposing management services on WAN
- Restrict admin source CIDRs explicitly
6. Save known-good state¶
- Export configuration backup
- Record interface mapping and subnet plan