ip address

Posted on 2013-02-03
Last Modified: 2013-02-05
Hello All,

I ordered a new sonic wall to replace and existing firewall.   i purchased the installation package.  However halfway in to the installation the technician informed me that the subnet 192.168.1.x was common and not going to work with my VPN clients because most home networks operate with the same subnet.   He recommended changing the subnet but did not give any guidance. All of the VPN clients will be residential clients.   Is there a best business practice for an ip subnet for a small business yet able to access maximum devices. without running in to conflicting ip addressing\vpn  issues. can i just assign any set of ip address  internally and is there a set i should concider for usage?   Thank you
Question by:rschwab
  • 2
  • 2
  • 2
  • +2
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 100 total points
ID: 38849183
Both the LAN and VPN IP network segments should avoid common /default subnets like:

If any client tries to connect and their local subnet is the same, they will not be able to access resources on the corporate LAN, thus as mention at the corporate site avoid common subnets as per that list.  This may mean you have to change your current LAN network at the corporate site.
LVL 30

Expert Comment

ID: 38849185
That's not true,as many different routers with different brand names hand out different subnet address ranges.

Most VPN  security settings actually will not allow you to access your home network  for security reasons.

Cisco by default has this turned on and I believe Sonicwall does the same.
LVL 77

Expert Comment

by:Rob Williams
ID: 38849197
I believe pgm554 is referring to split-tunneling (accessing home resources simultaneously with the corporate resources), which is a different issue.  That can be configured with the Sonicwall but is not by default, and not recommended.
LVL 77

Expert Comment

ID: 38849236
The main point and the reason the issue came up deals with avoiding having the Corporate LAN and VPN IP ranges with IP addresses that are common out of the box among various retail routers.

Split tunneling is no panacea.

As to the consideration it depends on your need. I.e. do you use vlans, do you need to separate systems based on their use/department?
How many IPs do you need?
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.


Assisted Solution

matthewttm earned 150 total points
ID: 38850097
Hi,  there is no recommended set as it depends on the number of users (PC, printers, wireless devices).

normally if the number of users are small, say less than 200, you can consider to use subnet.

Author Comment

ID: 38851104
We are a shop of about 30 users and about 50 devices,  there will be two vlan.  one for in house wireless- routed and another for guests not routed.   At this time it's like the employee growth will be 1 employee per year.
     Sorry about my ignorance towards ip addressing.   If i understand correctly the subnet masking indicates the number of devices available. The current 192.168.1.x  is a common subnet used be many residential based routers. Since we are working with a private network there is nothing  preventing me from changing 3rd octet  to an  192.168.5.x  ?      thank you all for your assistance
LVL 77

Accepted Solution

arnold earned 250 total points
ID: 38851145
Correct, you can choose any private block or combination of blocks

I.e. your switch supports DHCP relay agent functionality such that you can configure your DHCP with one IP scope for routed traffic and a separate for your guest.

Author Closing Comment

ID: 38858179
I'm certainly not qualified to grade anyone in this field,  but the points assigned addressed my needs thank you all for your knowlege and sharing your expertise

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sonicwall VPN 17 74
SSL RA VPN 7 104
Mapping drives cross domain via logon script 2 7
VPN Access to Network 4 18
One of the Top 10  common Cisco VPN problems are not-matching shared keys. This is an easy one to fix, but not always easy to notice, see the case below. A simple IPsec tunnel between fast Ethernet interfaces of routers SW1 (f1/1) and R1(f0/0). …
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now