User guide

Frequently Asked Questions
User Guide 105
addresses can change. A changing address prevents a connection
between the two appliances. However, this issue can be resolved by
using Dynamic DNS. For information, see “Registering with the
Dynamic DNS Service” on page 59.
How do I get a static external IP address?
The external IP address for your computer or network is assigned by
your ISP. Many ISPs use dynamic IP addresses so that their network
is easier to configure and to make the connection of a Web server to
their network more difficult. Most ISPs supply a static IP address as
an optional service.
How do I troubleshoot the connection?
If you can ping the trusted interface of the remote Firebox X Edge
and the computers on the remote network, the VPN tunnel func-
tions correctly. The configuration of the network software or the
applications are possible causes of other problems.
Why is ping not working?
If you cannot ping the local network address of the remote Firebox
X Edge, follow these steps:
1 Ping the external address of the remote Firebox X Edge.
For example, at Site A, ping 68.130.44.15 (Site B). If the ping does not
come back, make sure the external network settings of Site B are correct.
(Site B must be configured to respond to ping requests on that
interface.) If the settings are correct, make sure that the computers at
Site B have access to the Internet. If this procedure does not give a
solution, talk to a service person at your ISP.
2 If you can ping the external address of each Firebox X Edge, try
to ping a local address in the remote network.
From Site A, ping 192.168.111.1. If the VPN tunnel functions correctly,
the remote Firebox X Edge sends the ping back. If the ping does not
come back, make sure the local settings are correct. Make sure that the
local DHCP address ranges for the two networks connected by the VPN
tunnel do not use any of the same IP addresses. The two networks
connected by the tunnel must not use the same IP addresses.
How do I obtain a VPN upgrade license key?
You can purchase a license key for an upgrade from a reseller or
from the WatchGuard Web site:
http://www.watchguard.com/sales/buyonline.asp