Solved

sonicwall vpn tunnel interface routing - 2 offices

Posted on 2015-01-19
3
15 Views
Last Modified: 2016-10-14
I have 2 simple LANS connected via SW TZ205's using the wizard. 192.168.0.0/24 pc's/servers can see 192.168.1.0/24. I have 4 VENDOR routers attached at location 1 (MAIN OFFICE). Any pc on the MAIN LAN can get to the vendor services through simple static routes. I need pc's attached on the REMOTE side of the VPN tunnel to also "see" these 4 vendors via their respective routers. I have played a little with tunnel interface and routing but just can't quite get the grasp of the configurations and how to successfully set them up.
Xperts1.pdf
0
Comment
Question by:sgtsonline
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 78

Expert Comment

by:arnold
ID: 40559207
Your Vpn needs to push the networks available on one end to the other.
The difficulty is the remote location might not have a path back through the VPN for 192.168.1.x if the vendor router will actually pass traffic when the originating IP is not on the 192.168.0.0/24

Look at route advertising over VPN, this will provide you more flexibility by not requiring changes to vpn config when providers are switches, I.e. Network switched.

Is there a specific host accessible on the vendor sites?

Creating a single IP on the LAN that forwards to the vendor and then configuring DNS vendor1 192.168.0.x
Vendor2 192.168.0.y
Vendor3 192.168.0.w

Within this rule, make sure the source IP is NATed before being passed through the respective vendor device.
0
 
LVL 39

Accepted Solution

by:
Aaron Tomosky earned 500 total points
ID: 40560657
for the vpn tunnel setup, you need to make an address object group that has all the remote networks you want it to see. Create that at both ends of the tunnel and use that for the vpn config -> local networks (remote networks on the other side)

Here is the long version:
https://www.sonicwall.com/downloads/advanced_vpn.pdf
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question