Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How do I incorporate a different VPN tunnel device behind my Sonicwall TZ210

Posted on 2015-02-12
6
Medium Priority
?
180 Views
Last Modified: 2015-02-19
I have a site that was set up with ISP managed router and a sonicwall TZ210 behind, currently establishing a VPN tunnel to my other facility.  Situation arose that I needed an additional VPN to connect to new location (fortinet).  I obtained additional Public IP from ISP, but it seems that my two VPN devices cannot run parallel because the second CIDR is somehow being statically routed to the first.  I need to get this two different VPN tunneling devices to work.  Is there a way to attached the Fortinet to the TZ210 and have it maintain a tunnel?  I really have no clue on how to get this work, and I don't understand why the ISP managed router cannot maintain the different CIDR so that my devices can route traffic accordingly.

Please help.
0
Comment
Question by:pscanevit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 97

Expert Comment

by:John Hurst
ID: 40606960
I do not think you need an additional IP from your ISP for a new tunnel (I do not). Nor do you need another VPN box (I do not).

Please look in the configuration of the Sonicwall for the ability to add a new tunnel to a different location (external IP).

I do this with Cisco and Juniper and multiple tunnels work great. Sonicwall most likely allow multiple tunnels.
0
 

Author Comment

by:pscanevit
ID: 40606998
You are right. But this new device was prescribed to me by our new parent company and I was told to make it work
0
 
LVL 97

Accepted Solution

by:
John Hurst earned 2000 total points
ID: 40607007
I would pick one device, one IP and use that for multiple tunnels. Surely your parent company can understand this fairly simple reality.

Using multiple boxes and multiple external IP addresses into one company site just layers on complexity.  If you must do this and it is new ground for you, please get some consulting help. What you want to do is not simple.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:pscanevit
ID: 40607066
thank you I will let them know.  I am definitely not a fan of complexity and readily admit that I am not an Engineer by any stretch.   I just dont' know at this point if the sonicwall is going to connect to their Fortinet.  I have a Parallel setup working in another facility and it works fine.  Go figure.
0
 

Author Closing Comment

by:pscanevit
ID: 40618670
Thank you for the reinforcement.  I was able to plead my case on using existing device to establish additional connection
0
 
LVL 97

Expert Comment

by:John Hurst
ID: 40618717
@pscanevit  - Thanks for the update and I was happy to help.
0

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question