It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda SecureEdge

How to Migrate WSG Inline Bridge Setups

  • Last updated on

This article provides migration instructions for WSG inline bridge setups in SecureEdge.

Note that High Availability is supported for both setups.

LAN-VLAN Deployment

The figure below illustrates a LAN-VLAN setup using an inline bridge deployment.

lan-vlan01.png

Bridge VLAN Deployment

The figure below illustrates a Bridge-VLAN setup using an inline bridge deployment.

bridge-vlan01.png

Setups are similar to the above but need configuration changes.

Note: Assuming the border firewall connects on port P2 and the local LAN switch on port P3, set up each VLAN using an individual bridge-type WAN device. For example, in this case, a VLAN 10 configuration with gateway 192.168.10.1 and the Site device reachable via 192.168.10.10 .

Note that the Initial Setup below is similar for both, differing only in the WAN interface configuration.

Initial Setup

LAN-VLAN Deployment

Add the appliance to your SecureEdge Manager account as a Site device.

  1. Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.

  2. The chosen Tenant/Workspace is displayed in the top menu bar.

  3. From the drop-down menu, select the workspace your appliance should be assigned to.

  4. Go to Infrastructure > Sites.

  5. The Sites page opens. In the top-right corner of the window, click New site. For more information, see How to Create an Inline Bridge on a Stand-Alone Site.

    new-sit.png
  6. The New Site Basic Information blade opens. Enter values for the following:

    • Name – Enter the name of the site.

    • Edge Service – Select (None).

    • Root Password – Enter the root password.

    • Confirm Root Password – Retype the root password to confirm.

      new-site1.png
  7. Click Next. The Site Appliances blade opens.

    site2.png

     Note: If your appliance is not listed, you can add it by using the serial number and the linking code found on the back of the Quick Start Guide delivered with your appliance.

  8. Select your appliance from the list of appliances linked to your account. For a high availability cluster, select two appliances. For more information on high availability, see High Availability. Note: After ordering, it might take up to 3 hours before your device is listed.

  9. Click Add missing site appliance by serial and linking code/license token

  10. Specify values for the following:

    • Serial – Enter the serial number of your appliance.

    • Code/Token – Enter the linking code (located on the back of the Quick Start Guide shipped with your hardware appliance), or the token of your VTx appliance.

      site3.png
  11. Click Add to add the device to your account.

  12. Click Next. The WANs blade opens.

  13. Select the number of desired WAN connections from the drop-down list.

    site4.png
  14. Click Next. The Configure WAN link blade opens.

  15. Specify values for the following:

    • Name – Enter a unique name for the WAN link. For example, in this case, WSG-VLAN-10

    • Type – Select Bridge from the drop-down list.

    • WAN Port – Select P2.

    • WAN Virtual LAN ID – Enter 10.

    • IP Address – Enter the network IP address assigned to the port. For example, in this case, 192.168.10.10

    • Netmask – Enter the CIDR netmask suffix. E.g., 24

    • Gateway – Enter the gateway IP address. For example, in this case, 192.168.10.1

    • LAN Ports – Select the LAN ports this interface is connected to and click +. For example, in this case, the selected LAN port is P3.10

    • Provider Pinning – Select a provider classification from the drop-down list.

      wan1-setup.png
  16. Click Next. The LANs blade opens.

  17. Select the number of desired LAN connections from the drop-down list. 

    site5.png
  18. Click Next. The Advanced Settings blade opens.

  19. Specify values for the following:

    • Update Window Timezone – Select Dynamic from the drop-down list, or select the time zone where the box is located.

    • Primary DNS – Enter the IP address of the primary DNS server.

    • Secondary DNS – Enter the IP address of the secondary DNS server.

      site6.png
  20. Click Next. The Summary blade opens.

    site7.png
  21. Review your specifications. If everything is correct, click Save.

  22. After your site configuration has been created successfully, click Finish.

    site-created- success.png

The appliance will automatically apply the configuration upon its first boot.

Bridge VLAN Deployment
  • Follow the initial setup, except for the WAN interface configuration.

  • Configure the WAN interface as shown below:

    • Name – Enter a unique name for the WAN link. For example, in this case, WSG-VLAN-1

    • Type – Select Bridge from the drop-down list.

    • WAN Port – Select P2.

    • WAN Virtual LAN ID – Enter 1.

    • IP Address – Enter the network IP address assigned to the port. For example, in this case, 192.168.10.10

    • Netmask – Enter the CIDR netmask suffix. E.g., 24

    • Gateway – Enter the gateway IP address. For example, in this case, 192.168.10.1

    • LAN Ports – Select the LAN ports this interface is connected to and click +. For example, in this case, the selected LAN port is P3.1

    • Provider Pinning – Select a provider classification from the drop-down list.

      wan2-setup.png

To set up more than 8 VLANs, set the Provider Pinning field to Pin to Group 1 for the first 8 VLANs or bridges. For the next 8 VLANs, select Pin to Group 2. Note that up to 16 providers are supported in total.

After saving the configuration for both VLANs and setting up one WAN bridge interface each, the bridge's network details will appear in the WANS  table on the Sites page.

bridgevlans.png

Further Information