• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 283
  • Last Modified:

Multiple Gateways on one subnet

Hello Experts,

I have a customer that has two buildings connected with Wi-Fi and one subnet 192.168.0.x.  Building A has the WAN circuit and Building B has to go over the Wi-Fi to get internet. They want to put a new WAN circuit into Building B and add another FortiGate to go out to the internet but still maintain the Wi-Fi LAN. Can I do this without having to re-subtnet  Building B? Can I deploy multiple Gateways without creating any problems?
0
penntechs
Asked:
penntechs
  • 4
  • 2
  • 2
2 Solutions
 
StampelCommented:
Sure, if you put the fortigate in the same 192.168.0 LAN , you just have to change the main gateway of building B equipments only. Then you will add the old WiFi persistent route with a lower priority (metric). Lower metric get higher prio :)
Check http://support.microsoft.com/kb/299540

route add 0.0.0.0 MASK 0.0.0.0 192.168.0.254 metric 10
0
 
penntechsAuthor Commented:
The persistent WiFi connection is a site to site connection with the sole purpose of extending the LAN backbone. I don't think I can break that connection easily.
0
 
StampelCommented:
You do not need to break it.
Just add the new fortigate and the corresponding IP as default gateway for your equipments in Buiulding B.
Or do i miss something ?
0
The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

 
QlemoDeveloperCommented:
If you configure your devices with static IP instead of DHCP, then yes, changing the default gateway on all devices in B is all you have to do. Nothing else.

If you use DHCP - ouch. You can trick the routing table to override the DHCP default gateway somehow by setting more specific routes, that is:
  route -p add 0.0.0.0 mask 128.0.0.0 192.168.0.x
  route -p add 128.0.0.0 mask 128.0.0.0 192.168.0.x

That way the default gateway remains in building A, but Internet traffic is routed to 192.168.0.x.
0
 
penntechsAuthor Commented:
Ok I will try it
0
 
penntechsAuthor Commented:
That worked thanks
0
 
QlemoDeveloperCommented:
The "creative" part lies more in http:#a40402468 then in http:#a40402301, so I would have expected to get more points :(
0
 
penntechsAuthor Commented:
Sorry Olemo...I didn't change the routing table
0

Featured Post

Learn to develop an Android App

Want to increase your earning potential in 2018? Pad your resume with app building experience. Learn how with this hands-on course.

  • 4
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now