Can a SonicWALL route two networks?

I currently have a 10.100.0.x network for my data and all our VoIP stuff is on 192.168.0.x. Currently we have two Juniper SSG-140 for each. I would like to switch us over to a single SonicWALL NSA 3500. I have worked a lot with SonicWALL but my question is, if I put both on different interfaces and keep the same networks would I be able to communicate between the networks if I configured the firewall rules correctly?

What would I use for the default gateway on both sides?
LVL 10
ThorinOAsked:
Who is Participating?
 
digitapConnect With a Mentor Commented:
you could do that on the sonicwall. is 10.100.0.1 the gateway for the LAN interface of the sonicwall? if you need to segregate traffic or set any bandwidth management rules for your voip traffic, you'll want to create a new zone for that traffic. if you just need to route between the two network, then keep then put the new interface for the 192.168.0.x subnet on the LAN zone. for that matter, if you have a newer sonicwall with the enhanced OS, you can set firewall rules based on interface so i don't think it really matters much. keeping the zones LAN sets an inherent "trust all" on the traffic.
0
 
digitapCommented:
when you say same network, does that mean the same IP subnet for both?
0
 
ThorinOAuthor Commented:
Sorry what I mean is keeping the same 10.100.0.x and 192.168.0.x networks. Put them on different SonicWALL interfaces, both of those interfaces would go to the same switch. The 10.100.0.x would use a gateway of 10.100.0.1 and the 192.168.0.x would use 192.168.0.1 as the gateway. Would I then be able to communicate between the two or would I be able to do something else to get communication working.
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
ThorinOAuthor Commented:
Ultimately I would like to take advantage of Exchange 2010 unified messaging, setup monitoring on the VoIP LAN, etc. Right now we can't because everything is physically separate. The only way we currently can do this is to go in/out public interfaces which isn't good.
0
 
digitapConnect With a Mentor Commented:
yes. what kind of monitoring are you wanting to do, sonicwall viewpoint? with that thought, i'd create VOIP zone and assign it to an available interface and give it the subnet you want. keep your existing LAN on the X0 LAN interface. you'll setup VOIP <> LAN firewall access rules. if you enable any kind of bandwidth management, you'll need to setup this via firewall access rules. it will be easier to do this or any other kind of traffic management if you have it on a separate zone.
0
 
ThorinOAuthor Commented:
I have a Icinga setup which is a fork of Nagios so I would like to monitor the VoIP stuff on that LAN. I will also be getting ViewPoint. I will have to mess with it when I get it but I wanted to get some confirmation before I spent the money, thanks!
0
 
digitapCommented:
i'm not familiar with that monitoring hardware, so i don't know how it "monitors". is it transparent to the traffic and can sit between the voip hardware and the interface on the sonicwall? does it create a separate subnet between it and the sonicwall and between it and the voip hardware?

viewpoint is easy. install the software on a server and point the logs to the server....done.
0
 
ThorinOAuthor Commented:
I basically just needs the ability to ping, use port 5666, and whatever other ports I have setup to be monitored.
0
 
digitapCommented:
what confirmation are you looking for from me (us) specifically? i phrased my answer in multiple ways, but i feel like you still have some specific question that isn't getting the answer you're looking for.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.