Unable to access subnet on remote network using SonicWALL TZ-215 and NSA 2400.

I need to know if my SonicWALL TZ-215 will support static routes through a site-to-site VPN tunnel. My Madison office has a site-to-site VPN connection to HQ. Chicago is on a Metro Ethernet connection with HQ and shares HQ's NSA 2400 for Internet access.

Madison needs to connect to Chicago's subnet via their site-to-site connection with HQ if possible. Will this work with TZ-215 via an IPSec site-to-site VPN tunnel to my HQ office? Or is there a better way to handle this.

Basically, my Madison TZ-215 does not know how to get to Chicago (without a TZ-215). Both Madison and Chicago are connected to HQ's network.

Thank you.
LVL 1
vsCoderAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
carlmdConnect With a Mentor Commented:
So if I understand Chicago bypasses the Sonicwall and is directly connected to your LAN.

I assume you currently have a permanent route at corporate that allows the LAN there to connect to Chicago, with the Cisco router as the gateway. Is that correct.

I would try...

I assume you can ping anything on your corporate LAN from Madison, true?
From Madison I would traceroute to the ip of the Cisco router at corporate.  Can you get there?
If so, try adding a static route at Madison that has the Cisco router as the gateway and the Chicago subnet as the destination.

What happens now?
0
 
carlmdCommented:
Do all 3 sites have different non routable ip address ranges on their LAN?

Is Chicago connected via a different Sonicwall X interface other than the WAN. If so, how is it configured?
0
 
vsCoderAuthor Commented:
@carlmd - thank you for your response. All sites have non-routable IPs on their LANs. Our new provider has connected our Chicago and Corporate offices (along with a couple of other subnets) to their Metro Ethernet network. Chicago comes into my LAN subnet via a separate Cisco router. My NSA 2400 then provides both Corporate and the Chicago subnet Internet access. Make sense?

Madison is on a separate Internet connection using a site-to-site VPN connection from their SonicWALL TZ-215 to my Corporate SonicWALL NSA 2400.
0
 
vsCoderAuthor Commented:
Thank you, carlmd.

I was able to solve the problem with some additional VPN policies on the TZ-215 and NSA 2400. All is well now.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.