whether you have chosen routed or drop-in, your configuration may require that you add secondary networks to any of the three firebox interfaces. a secondary network is a separate network connected to a firebox interface by a switch or hub.

   

    when you add a secondary network, you map an ip address from the secondary network to the ip address of the firebox interface. this is known as creating (or adding) an ip alias to the network interface. this ip alias becomes the default gateway for all the machines on the secondary network. the presence of a secondary network also tells the firebox that another network resides on the firebox interface wire.

    you add secondary networks in the following two ways:

    1?the quicksetup wizard, which is part of the installation process, asks you to enable the checkbox if you have "an additional private network behind the firebox?when you are entering the ip addresses for the firebox interfaces. the additional private network you specify becomes the secondary network on the trusted interface. for more information on the quicksetup wizard, see "running the quicksetup wizard?on page 35.

    2?after you have finished with the installation, you can add secondary networks to any interface using policy manager, as described in "adding secondary networks?on page 57.