Solved

Sonicwall Routing

Posted on 2012-04-04
5
262 Views
Last Modified: 2012-05-30
I have a scenario where I am currently using a WAN connection on my TZ210 to a network "above" mine that provides access to necessary servers as well as the Internet.  Currently, I have about 75 one-to-one NATs for various internal static IPs to external static IPs, which are necessary for the server communications.  I am getting my own Internet connection, however, and would like to route all 10.168.0.0/255.255.252.0 traffic through the primary WAN connection (the current one) and then route all other Internet-bound traffic through the secondary WAN connection (the new one).  What is the best way (most efficient) to do this?
0
Comment
Question by:TCS-tech
  • 3
  • 2
5 Comments
 
LVL 5

Expert Comment

by:andrew1812
ID: 37809396
Source based routing would be an option where you can select packets originating from a specific source to use a specific interface to exit.
0
 

Author Comment

by:TCS-tech
ID: 37813144
Thanks for the comment, Andrew!

Would that require changes to Routing, NAT Policy, and Firewall?  That is what I had in mind, but I wasn't sure #1 if that was the most efficient way to handle it and #2 if it required changes to all 3 sections of the Sonicwall config or just the Routing.  It seems, though, that all 3 would be required.
0
 

Author Comment

by:TCS-tech
ID: 37813158
I just thought of this as well:  How would I route all other traffic through the new WAN connection?
0
 
LVL 5

Accepted Solution

by:
andrew1812 earned 500 total points
ID: 37815046
1. Setup an source routing for the required packets. This is a route entry which is performed , so routing table would change

2. To route all other packet through the WAN interface, setup a default route ( In Cisco it would be ip route 0.0.0.0 0.0.0.0 "gateway ip", where gateway ip would the WAN interface gateway IP address. This is a route entry , so routing table would change.

3. Can you ellaborate on how the networks are setup on TZ210, as in how many physical interfaces (ethernet) are used on it like , where does the  10.168.0.0/255.255.252.0 terminate, is the packets destined for the internet setup on other interfaces, where is WAN IP address configured etc.
This is to recommend a solution for NAT.
0
 

Author Closing Comment

by:TCS-tech
ID: 38030447
Thanks for your advice, Andrew!  Sorry it took so long to respond.  I must have missed the email to inform me of your reply.  I am going to reconfigure the entire router sometime in July probably.  I plan to setup the new Internet connection on the primary WAN (X1) and setup the (X2) port as a trusted LAN.  Then, I will setup source routes to route all traffic destined for 10.168.0.0 through the X2 port like you suggested.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

While it is possible to put two routes in place with the secondary having a higher metric, this may not always work. In the event of a failure that does not bring down the physical interface on the router the primary route is not removed. There is a…
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now