Solved

sonicwall vpn tunnel interface routing - 2 offices

Posted on 2015-01-19
3
18 Views
Last Modified: 2016-10-14
I have 2 simple LANS connected via SW TZ205's using the wizard. 192.168.0.0/24 pc's/servers can see 192.168.1.0/24. I have 4 VENDOR routers attached at location 1 (MAIN OFFICE). Any pc on the MAIN LAN can get to the vendor services through simple static routes. I need pc's attached on the REMOTE side of the VPN tunnel to also "see" these 4 vendors via their respective routers. I have played a little with tunnel interface and routing but just can't quite get the grasp of the configurations and how to successfully set them up.
Xperts1.pdf
0
Comment
Question by:sgtsonline
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 78

Expert Comment

by:arnold
ID: 40559207
Your Vpn needs to push the networks available on one end to the other.
The difficulty is the remote location might not have a path back through the VPN for 192.168.1.x if the vendor router will actually pass traffic when the originating IP is not on the 192.168.0.0/24

Look at route advertising over VPN, this will provide you more flexibility by not requiring changes to vpn config when providers are switches, I.e. Network switched.

Is there a specific host accessible on the vendor sites?

Creating a single IP on the LAN that forwards to the vendor and then configuring DNS vendor1 192.168.0.x
Vendor2 192.168.0.y
Vendor3 192.168.0.w

Within this rule, make sure the source IP is NATed before being passed through the respective vendor device.
0
 
LVL 39

Accepted Solution

by:
Aaron Tomosky earned 500 total points
ID: 40560657
for the vpn tunnel setup, you need to make an address object group that has all the remote networks you want it to see. Create that at both ends of the tunnel and use that for the vpn config -> local networks (remote networks on the other side)

Here is the long version:
https://www.sonicwall.com/downloads/advanced_vpn.pdf
0

Featured Post

Is your NGFW recommended by NSS Labs?

Ours is! NSS Labs Next Generation Firewall Test gives the WatchGuard Firebox M4600 a "Recommended" rating! Curious where your NGFW landed on the  Security Value Map? See the map and download the full report today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question