WatchGuard Firebox System 7.0 User Guide

Appendix A: Troubleshooting Firebox ConnectivityMethod 1: Ethernet Dongle MethodThis method involves using a single crossover cable.1 Make sure the Firebox and the management station aredisconnected from the network.2 Connect one end of the crossover cable to the optionalinterface and the other end to the external interface,creating a loop. Power-cycle the Firebox.This cabling should produce the following light sequence on thefront of the Firebox:Armed light: steadySys A light: flickering(Do not be concerned with the lights on the Security TriangleDisplay indicating traffic between interfaces.)3 Disconnect the crossover cable from the optional andexternal interfaces. Now, connect one end to thetrusted interface and the other end to the managementstation. Do not turn off the Firebox.4 Make sure the management station has a static IPaddress. If it doesn’t, change the TCP/IP settings to astatic IP address. The computer designated as themanagement station should be on the same network asthe configuration file, preferably the trusted network,so you do not need to reassign an IP address to yourcomputer after the configuration file has beenuploaded.The following is an example of a typical IP address scheme:Management station: 192.168.0.5Subnet mask: 255.255.255.0Default gateway: 192.168.0.1Trusted network: 192.168.0.1 (from the configuration file)5 It is recommended that you double-check the IPaddress of the management station. To do this, open aDOS prompt and type ipconfig /all.6 Use the Ping command to assign the Firebox atemporary IP address so your management station cancommunicate with the Firebox. At the DOS prompt,type ping 192.168.0.1 (this is the default gatewayof your computer). You will then see a request timeout.Ping again. You should get four replies.272 WatchGuard Firebox System