Solved

Secondary Gateway on Sonic Wall TZ190

Posted on 2009-05-17
7
359 Views
Last Modified: 2012-08-14
I created a secondary by following the instructions on this link below. it works great but the two internal subnets are able to ping each other. I need to have two subnets and have a block so that one subnet can not reach the other. Example, lan subnet primary is 192.168.2.1
secondary is 192.168.0.1 I don't want anything on 2.1 to be able to access 0.1 subnet

http://www.sonicwall.com/downloads/supporting_multiple_firewalled_subnets_on_sonicos_enhanced.pdf
0
Comment
Question by:webiis
  • 4
  • 3
7 Comments
 
LVL 6

Accepted Solution

by:
KevinCovert earned 500 total points
ID: 24408968
I would have to assume that the subnets are on two separate VLAN/zones.  Check your firewall policy from zone A>zone B and set a rule to deny all and then create another policy for zone B>zone A for deny all.  That should block all your traffic between the two LANs.

If you can't do it through the firewall just redirect the traffic between the LAN subnets with an intentional bad gateway.  Not nearly as clean but it will stop the traffic.

Source                Dest                    Gateway
192.168.0.x       192.168.2.x          1.1.1.1

Try the firewall route if at all possible.

KMC
0
 
LVL 6

Expert Comment

by:KevinCovert
ID: 24429304
Any luck?
0
 

Author Comment

by:webiis
ID: 24431188
haven't had a chance to try it.  I'm not exactly sure of how to create those zones. I will try though.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 6

Expert Comment

by:KevinCovert
ID: 24433060
Configuring Zones - Chapter 17.  This is assuming you have the 4.0 enhanced OS.

http://www.sonicwall.com/downloads/SonicOS_Enhanced_4.0_TZ_180_190_Administrators_Guide.pdf
0
 
LVL 6

Expert Comment

by:KevinCovert
ID: 24476097
How is this issue coming along?

KMC
0
 

Author Comment

by:webiis
ID: 24938400
no luck yet. I'm going to try it again. info soon.
0
 

Author Comment

by:webiis
ID: 25113835
sorry guys still haven't had a chance to implement this. I will circle back around asap.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Vlan to Vlan communication 9 103
Setting up a VPN 60 140
configure ASA Vlan Interface 14 60
Network cabling explanation? Copper, twinaxial, SFP+, fiber? 4 46
Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question