ESA C190 two interfaces ( DATA 1 & DATA 2)

[mohamed.fawzy2012]

 I am trying to install new ESA c190 for first time but  there is only one default gateway and customer  wants an interface (DATA2) for internal and external SMTP traffic  along with "DATA 1" interface as dedicated Management interface and I don't see how the connection will work with only one default gateway, when the interfaces are on separate networks. and default route points to ip address of management interface but i don't know is that right or i suppose to edit it to ip address of DMZ interface that have DATA 2 connected to it , i just want to understand how is the traffic being separated 

DATA1 interface connected to core switch and its gateway is the core

DATA2 interface connected to DMZ zone and gateway is firewall 

[Libin Varghese]

Hi,

You can control the traffic going out of the ESA using the network routes configured under Network -> Routes.

The interface on the ESA would be selected based on the route defined for the destination the ESA is connecting to.

Regards,

Libin Varghese 

[mohamed.fawzy2012]

How give me examples like i said data1 will be dedicated management and its gateway will be core switch and data2 interface will be smtp listener and connected directly to dmz interface of firewall


Explain also how smtp traffic will go from internal users to ESA via data1 or data2 

[dmccabej · Accepted solution]

Hello,

I've attached an example that I'm using for one of my internal labs. As you can see I have two interfaces, with one as 172.16.0.10 and the other as 192.168.1.50. All traffic by 'Default' will be going out my Default Route (Default Gateway) of 172.16.0.1, and hence out my 172.16.0.10 IF; however, any traffic destined for my internal network of 192.168.1.0/24 will instead be going out my 192.168.1.50 IF. 

If you're still unclear, I would recommend researching information on IP routing and how it works. 

Thanks!

-Dennis M.

[mohamed.fawzy2012]

i know that solution , what it is confused that is the SMTP traffic comes from internal users to outside and comes from outside to internal users , is that will not affect any thing after doing this ?

[Ken Stieers]

When thinking about how mail is processed through the ESA, which listener (which is tied to an ip address and from there which interface) is what matters.

With mail leaving the ESA, the interface that it leaves doesn't affect the processing except that the box receiving it has to allow mail from that ip/firewall holes open etc.