Solved

Sonicwall NSA 240 and MPLS Routing Issue

Posted on 2010-11-22
3
1,181 Views
Last Modified: 2012-05-10
First off, I've inherited a nightmare, and I'm not 100% sure what I want can be done.

I'm in the process of setting up an MPLS across 3 sites.  I've purchased 3 SonicWall NSA 240's to use in each location as firewalls.

Each site has two separate facilities.  
Site 1 - Network 192.168.51.x and 192.168.100.x
Site 2 - Network 192.168.52.x and 192.168.101.x
Site 3 - Network 192.168.50.x

Now to make things complicated.  the 192.168.100 and 101 networks should be able to see the entire network.   The 192.168.5x networks should not be able to see the 10x networks at all.

On the Provider Router there are 2 ports.  00/Internet 01/MPLS
Site 1 MPLS GW's are 51.254 and 100.254
Site 2 MPLS GW's are 52.254 and 101.254
Site 3 MPLS GW are 50.254

So on Site 1 and 2 Routers I assume I need to set 4 ports.
X0 - 5x LAN
X1 - 10x LAN
X2 - MPLS -> 01 on Provider Router
X3 - Internet -> 00 on Provider Router

I'm not sure how to set up Router to make all this work.  
Let me know if you have any ideas.
0
Comment
Question by:C_Parlato
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 33

Accepted Solution

by:
digitap earned 500 total points
ID: 34190965
what i've done in this scenario is to setup the mpls network on its own ip network.  then, create routes using the gateway of the sonicwall that owns those networks.  once the mpls network is setup on its own zone you can use firewall acls to control the ip networks from accessing the other networks across the mpls network.
0
 
LVL 2

Author Comment

by:C_Parlato
ID: 34192023
That's part of the answer digitap.  The MPLS network can't overlap into site network.  

Also, looks like I need to make a route that points traffic from the x2 port (MPLS Traffic) to the MPLS GW.   Then route all local traffic that needs to go through the MPLS to the x2 port.


0
 
LVL 33

Expert Comment

by:digitap
ID: 34192965
correct...the MPLS could be something like 10.1.2.x/24.  Then, site one would be 10.1.2.1, Site 2 would be 10.1.2.2, etc.  are you saying that your MPLS network would not let all those ports be on the same IP subnet?


by the way, thanks for the points!
0

Featured Post

Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

While it is possible to put two routes in place with the secondary having a higher metric, this may not always work. In the event of a failure that does not bring down the physical interface on the router the primary route is not removed. There is a…
I have seen some questions on problems with SSH/telnet access to Cisco routers that may occur despite the fact that from a PC connected to your LAN, Internet connectivity is in place and users can access Internet sites without any issues.  There are…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question