Solved

Can a SonicWALL route two networks?

Posted on 2011-03-14
9
779 Views
Last Modified: 2012-05-11
I currently have a 10.100.0.x network for my data and all our VoIP stuff is on 192.168.0.x. Currently we have two Juniper SSG-140 for each. I would like to switch us over to a single SonicWALL NSA 3500. I have worked a lot with SonicWALL but my question is, if I put both on different interfaces and keep the same networks would I be able to communicate between the networks if I configured the firewall rules correctly?

What would I use for the default gateway on both sides?
0
Comment
Question by:ThorinO
  • 5
  • 4
9 Comments
 
LVL 33

Expert Comment

by:digitap
ID: 35130728
when you say same network, does that mean the same IP subnet for both?
0
 
LVL 10

Author Comment

by:ThorinO
ID: 35130795
Sorry what I mean is keeping the same 10.100.0.x and 192.168.0.x networks. Put them on different SonicWALL interfaces, both of those interfaces would go to the same switch. The 10.100.0.x would use a gateway of 10.100.0.1 and the 192.168.0.x would use 192.168.0.1 as the gateway. Would I then be able to communicate between the two or would I be able to do something else to get communication working.
0
 
LVL 33

Accepted Solution

by:
digitap earned 500 total points
ID: 35130981
you could do that on the sonicwall. is 10.100.0.1 the gateway for the LAN interface of the sonicwall? if you need to segregate traffic or set any bandwidth management rules for your voip traffic, you'll want to create a new zone for that traffic. if you just need to route between the two network, then keep then put the new interface for the 192.168.0.x subnet on the LAN zone. for that matter, if you have a newer sonicwall with the enhanced OS, you can set firewall rules based on interface so i don't think it really matters much. keeping the zones LAN sets an inherent "trust all" on the traffic.
0
 
LVL 10

Author Comment

by:ThorinO
ID: 35131000
Ultimately I would like to take advantage of Exchange 2010 unified messaging, setup monitoring on the VoIP LAN, etc. Right now we can't because everything is physically separate. The only way we currently can do this is to go in/out public interfaces which isn't good.
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 33

Assisted Solution

by:digitap
digitap earned 500 total points
ID: 35131145
yes. what kind of monitoring are you wanting to do, sonicwall viewpoint? with that thought, i'd create VOIP zone and assign it to an available interface and give it the subnet you want. keep your existing LAN on the X0 LAN interface. you'll setup VOIP <> LAN firewall access rules. if you enable any kind of bandwidth management, you'll need to setup this via firewall access rules. it will be easier to do this or any other kind of traffic management if you have it on a separate zone.
0
 
LVL 10

Author Comment

by:ThorinO
ID: 35131297
I have a Icinga setup which is a fork of Nagios so I would like to monitor the VoIP stuff on that LAN. I will also be getting ViewPoint. I will have to mess with it when I get it but I wanted to get some confirmation before I spent the money, thanks!
0
 
LVL 33

Expert Comment

by:digitap
ID: 35135140
i'm not familiar with that monitoring hardware, so i don't know how it "monitors". is it transparent to the traffic and can sit between the voip hardware and the interface on the sonicwall? does it create a separate subnet between it and the sonicwall and between it and the voip hardware?

viewpoint is easy. install the software on a server and point the logs to the server....done.
0
 
LVL 10

Author Comment

by:ThorinO
ID: 35139073
I basically just needs the ability to ping, use port 5666, and whatever other ports I have setup to be monitored.
0
 
LVL 33

Expert Comment

by:digitap
ID: 35140487
what confirmation are you looking for from me (us) specifically? i phrased my answer in multiple ways, but i feel like you still have some specific question that isn't getting the answer you're looking for.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now