Go Premium for a chance to win a PS4. Enter to Win


ip address

Posted on 2013-02-03
Medium Priority
Last Modified: 2013-02-05
Hello All,

I ordered a new sonic wall to replace and existing firewall.   i purchased the installation package.  However halfway in to the installation the technician informed me that the subnet 192.168.1.x was common and not going to work with my VPN clients because most home networks operate with the same subnet.   He recommended changing the subnet but did not give any guidance. All of the VPN clients will be residential clients.   Is there a best business practice for an ip subnet for a small business yet able to access maximum devices. without running in to conflicting ip addressing\vpn  issues. can i just assign any set of ip address  internally and is there a set i should concider for usage?   Thank you
Question by:rschwab
  • 2
  • 2
  • 2
  • +2
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 400 total points
ID: 38849183
Both the LAN and VPN IP network segments should avoid common /default subnets like:

If any client tries to connect and their local subnet is the same, they will not be able to access resources on the corporate LAN, thus as mention at the corporate site avoid common subnets as per that list.  This may mean you have to change your current LAN network at the corporate site.
LVL 30

Expert Comment

ID: 38849185
That's not true,as many different routers with different brand names hand out different subnet address ranges.

Most VPN  security settings actually will not allow you to access your home network  for security reasons.

Cisco by default has this turned on and I believe Sonicwall does the same.
LVL 77

Expert Comment

by:Rob Williams
ID: 38849197
I believe pgm554 is referring to split-tunneling (accessing home resources simultaneously with the corporate resources), which is a different issue.  That can be configured with the Sonicwall but is not by default, and not recommended.
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 80

Expert Comment

ID: 38849236
The main point and the reason the issue came up deals with avoiding having the Corporate LAN and VPN IP ranges with IP addresses that are common out of the box among various retail routers.

Split tunneling is no panacea.

As to the consideration it depends on your need. I.e. do you use vlans, do you need to separate systems based on their use/department?
How many IPs do you need?

Assisted Solution

matthewttm earned 600 total points
ID: 38850097
Hi,  there is no recommended set as it depends on the number of users (PC, printers, wireless devices).

normally if the number of users are small, say less than 200, you can consider to use subnet.

Author Comment

ID: 38851104
We are a shop of about 30 users and about 50 devices,  there will be two vlan.  one for in house wireless- routed and another for guests not routed.   At this time it's like the employee growth will be 1 employee per year.
     Sorry about my ignorance towards ip addressing.   If i understand correctly the subnet masking indicates the number of devices available. The current 192.168.1.x  is a common subnet used be many residential based routers. Since we are working with a private network there is nothing  preventing me from changing 3rd octet  to an  192.168.5.x  ?      thank you all for your assistance
LVL 80

Accepted Solution

arnold earned 1000 total points
ID: 38851145
Correct, you can choose any private block or combination of blocks

I.e. your switch supports DHCP relay agent functionality such that you can configure your DHCP with one IP scope for routed traffic and a separate for your guest.

Author Closing Comment

ID: 38858179
I'm certainly not qualified to grade anyone in this field,  but the points assigned addressed my needs thank you all for your knowlege and sharing your expertise

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've had to do a bit of research to setup my VPN connection so that Clients can access Windows Server 2008 network shares.  I have a Cisco ASA 5510 firewall.  I found an article which was extremely useful: It had a solution if you use ASDM to config…
Overview Often, we set up VPN appliances where the connected clients are on a separate subnet and the company will have alternate internet connections and do not use this particular device as the gateway for certain servers or clients. In this case…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question