Cisco 1841 Box and Watchguard XTM21-W

Question

I have never set one of these up before and need a little assistance. Right now we have a T1 line coming in from Sprint to a Cisco 1841 and then on to our router. However, when I plug the Cisco 1841 into Port 0 and the router into Port 3 it does not work. In Port 1 I have my management computer plugged in. We have one subnet and this must be easy but I cannot figure out how to make this work. When the firewall is plugged in then I get no internet or network access.

EDIT:

We have a T1 line coming in from Sprint connected to a Cisco 1841 box currently. From there it connects to our switch. In regards to the Watchguard, I have tried plugging the sprint t1 line into port 0 on the watchguard box, then I have a network cable from the watchguard box port 2 to the switch and that doesn't seem to work. I am trying to bypass the cisco 1841 box by doing it this way. I have attached the network diagram to this post.

I don't want the Watchguard to use DHCP. I have a static IP address connect to the watchguard but no network or internet access when I do this.

What am I doing wrong?

I can't post images because I'm a new user.

EDIT:

In the Watchguard Network Setup it's set to Bridge Mode and then I have for the IP addresses 160.81.32.134/30 which is the Sprint IP address and for the gateway I have 160.81.32.133. For the trusted interface it is the same settings.

I have added 3 images of my current configuration. Can anyone tell me if this looks correct?

Answer 1

OK, first things first: Stop adding these as answers to your question. Add these as edits to your question.

Second: in Drop-in mode, the Watchguard uses the same ip address on all interfaces. That means that you're either going to have to configure your internal network to use the same subnet as the subnet in use for the WG interfaces (which isn't really possible in your case) or you're going to have to configure the Watchguard with Secondary Networks in order to use an internal subnet that differs from the subnet for the WG interfaces.

Your WG interface ip address is 160.81.32.134/30 which means that you've only been allocated two useable ip addresses in that subnet. One for your WG External interface (160.81.32.134) and one for the upstream router WAN interface (160.81.32.133).

Why don't you configure the WG for static mode? That seems the most appropriate in your case.

Answer 2

Your post is full of confusion.

In the Watchguard Network Setup it's set to Bridge Mode I have for the IP addresses 160.81.32.134/30 which is the Sprint IP address and for the gateway I have 160.81.32.133. For the trusted interface it is the same settings. I don't want the Watchguard to use DHCP. I have a static IP address connect to the watchguard

In bridge mode, the Watchguard doesn't have an IP address except for management purposes. In bridge mode you can't have IP settings on the trusted interface.

plug the Cisco 1841 into Port 0 and the router into Port 3

In bridge mode, port 3 is disabled unless you specifically configured it.

What am I doing wrong?

Not planning how everything will work first, then configuring things according to your plan, then troubleshooting bit by bit against your plan.

How is your T1 presented? I guess you have a terminator on 160.81.32.133 and the Cisco on 160.81.32.134 and with an internal address, and that's why you want the Watchguard to replace the Cisco?

Put the Watchguard in Mixed mode.

T1 -> ?? on 160.81.32.133 -> Watchguard interface 0, configured as External with 160.81.32.134/30, gateway 160.81.32.133.

Watchguard interface 1 configured with your LAN IP, 192.168.1.1 or whatever, connected to your switch. Watchguard does NAT, internal computers use Watchguard 192.168.1.x IP as their gateway.

Other Watchguard interfaces unused.

We have one subnet and this must be easy but I cannot figure out how to make this work.

It will work if the configurations are correct, otherwise it won't. Easy doesn't really come into it.