Solved

Sonicwall NSA 240 and MPLS Routing Issue

Posted on 2010-11-22
3
1,173 Views
Last Modified: 2012-05-10
First off, I've inherited a nightmare, and I'm not 100% sure what I want can be done.

I'm in the process of setting up an MPLS across 3 sites.  I've purchased 3 SonicWall NSA 240's to use in each location as firewalls.

Each site has two separate facilities.  
Site 1 - Network 192.168.51.x and 192.168.100.x
Site 2 - Network 192.168.52.x and 192.168.101.x
Site 3 - Network 192.168.50.x

Now to make things complicated.  the 192.168.100 and 101 networks should be able to see the entire network.   The 192.168.5x networks should not be able to see the 10x networks at all.

On the Provider Router there are 2 ports.  00/Internet 01/MPLS
Site 1 MPLS GW's are 51.254 and 100.254
Site 2 MPLS GW's are 52.254 and 101.254
Site 3 MPLS GW are 50.254

So on Site 1 and 2 Routers I assume I need to set 4 ports.
X0 - 5x LAN
X1 - 10x LAN
X2 - MPLS -> 01 on Provider Router
X3 - Internet -> 00 on Provider Router

I'm not sure how to set up Router to make all this work.  
Let me know if you have any ideas.
0
Comment
Question by:C_Parlato
  • 2
3 Comments
 
LVL 33

Accepted Solution

by:
digitap earned 500 total points
ID: 34190965
what i've done in this scenario is to setup the mpls network on its own ip network.  then, create routes using the gateway of the sonicwall that owns those networks.  once the mpls network is setup on its own zone you can use firewall acls to control the ip networks from accessing the other networks across the mpls network.
0
 
LVL 2

Author Comment

by:C_Parlato
ID: 34192023
That's part of the answer digitap.  The MPLS network can't overlap into site network.  

Also, looks like I need to make a route that points traffic from the x2 port (MPLS Traffic) to the MPLS GW.   Then route all local traffic that needs to go through the MPLS to the x2 port.


0
 
LVL 33

Expert Comment

by:digitap
ID: 34192965
correct...the MPLS could be something like 10.1.2.x/24.  Then, site one would be 10.1.2.1, Site 2 would be 10.1.2.2, etc.  are you saying that your MPLS network would not let all those ports be on the same IP subnet?


by the way, thanks for the points!
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now