Switch – How does Watchguard’s Secondary Network work

routersubnetswitch

am a bit confused on how this "Secondary network IP address on a different subnet" work.
http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#cshid=en-US/networksetup/second_net_config_c.html

According to the diagram I see the following:

  1. Internal interface assigned with an IP of 10.10.10.254 and
    172.16.1.254.
  2. Machines in the subnets 10.10.10.x and 172.16.1.x connected to this interface.

In other words, this is what I can visualize.
10.10.10.x subnet <–> Switch <–> Watchguard Interface
172.16.1.x subnet ——^

But how can a switch be connected to two different subnets or networks? Given we have 2 subnets, don't we need a router to route the traffic from this interface to the 2 subnets like in the following configuration?.

10.10.10.x subnet <–> Router <–> Watchguard Interface
172.16.1.x subnet ——^

Best Answer

Technically, the firewall would be the "router" in this case. Multiple subnets can coexist on one layer-2 broadcast domain. Each subnet will function as if the others aren't there.

Related Topic