Wireless Network replacing a VPN Network problem
Posted on 2010-11-18
I have a rather complicated networking problem I would like some help and guidance on working with a remote location and phone media gateway. Currently, the networks are connected across town via VPN. We're looking to replace that connection with a pair of high power wireless bridges. Seems simple enough, until you get to the networking here...
SonicWall NSA 240
The VPN policies define local and destinations networks. There's a media gateway at 192.168.30.20 that communicates with the phone system at 192.168.100.20. This setup works fine except for the hit in performance at times.
I've went back and forth on implementation of the bridges. I want to run that network off the X2 port of the NSA240. Now, whether or not I tie the second bridge into the TZ180 or directly into the switch at the remote location is up for debate. It really depends on what's required for the networking here. Keep in mind the media gateway and managed switch has a route set back to the TZ180 at 192.168.3.2. (switch being at 192.168.3.1)
One way I thought about doing this is simply setting the X2 port of the NSA240 to 192.168.3.3, bridges at 192.168.3.10, .11 and tying directly into the switch. I didn't really *think* I need the TZ180... from the second bridge and having the gateway set to 192.168.3.3 I was able to communicate with 192.168.1.X, .100.X quite easily. But, obviously the media gateway and switch have that route set to 192.168.3.2 so they're not trying to communicate through the same network. I'd rather now mess with that configuration if I can help it for two reasons: a) I can utilize the old VPN policies as a fail over if my wireless network dies and b) at $120/hr for a 3rd party network tech, the boss is making me do this. So, if I can avoid it, reconfiguring that equipment might be best avoided.
So, I then came up with this plan... set the X2 port on the NSA240 to another network of 192.168.4.1 and setup the P2 port on the TZ180 to 192.168.4.2, bridges at 192.168.4.10, .11 respectively. This setup works fine but I need to emulate the routes that the VPN established. ie...
192.168.100.0 --> 192.168.3.0
192.168.100.0 --> 192.168.30.0
192.168.1.0 --> 192.168.3.0
192.168.1.0 --> 192.168.30.0
192.168.3.0 --> 192.168.100.0
192.168.30.0 --> 192.168.100.0
192.168.3.0 --> 192.168.1.0
192.168.30.0 --> 192.168.1.0
I think my logic is correct here. But, this problem is a solid 9/10 so I need to be certain prior to trying to implement given that this is a required live office across town. The bridges are setup and function quite nicely. Proxim Tsunami MP-8150s. Tell me I'm either on the right track or nuts. I won't mind. :)