Firewall to ink out two company

I have mission to implement firewall to link the two company from different floor which is 1st floor and 5th floor.Both company have their own network and internet gateway .1st floor gateway is 192.168.100.1 and 5th floor gateway is 192.168.1.1.Our mission actually is use the firewall to link this company network together without major change in client site and both network should be interlink .I already draft the diagram before and after.I believe from my design from the 192.168.1.0/network  should be able to connect to 192.16.100.0/24 network because all the client gateway is 192.168.1.1 but from the 1st floor due to all the client is 192.168.100.1 so this may not connect to the 192.168.1.0/24 ,please advise how to overcome this issue.
Before-firewall-implementation.jpg
After-firewall-implementation.jpg
YaYangTeahAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Salah Eddine ELMRABETTechnical Lead Manager (Owner)Commented:
Hi,

Have tho both companies merged?? why need to use a firewall? it's possible to connect the both network together.

Regards.

Salah
0
YaYangTeahAuthor Commented:
I think Salah you are the person to advice me on another topic ,welcome again to give me advice.Yes,company is merge but what customer would to control the traffic also .
0
Salah Eddine ELMRABETTechnical Lead Manager (Owner)Commented:
Hi,

Which customer and which traffic?

RB

Salah
0
Introducing the "443 Security Simplified" Podcast

This new podcast puts you inside the minds of leading white-hat hackers and security researchers. Hosts Marc Laliberte and Corey Nachreiner turn complex security concepts into easily understood and actionable insights on the latest cyber security headlines and trends.

YaYangTeahAuthor Commented:
Both
0
Salah Eddine ELMRABETTechnical Lead Manager (Owner)Commented:
Hi,

There is a lot of option:

Do they want to keep both internet access or just one and decrease the Internet cost?

Do they want to use one domain and merge the servers or keep each company using there old domains?

Please share more details about you merging plan.

Regards.

Salah
0
YaYangTeahAuthor Commented:
They still want to keep thier own Internet, plan I already state at above. Thanks
0
YaYangTeahAuthor Commented:
Forgot mention about domain because  both company also don't have domain controller.
0
Salah Eddine ELMRABETTechnical Lead Manager (Owner)Commented:
what about ip address attribution, is configured is static way or using a dhcp server?
0
MarcusSjogrenCommented:
Your drawing is correct, just add: ip route 192.168.1.0 255.255.255.0 192.168.100.2 to the router 192.168.100.1
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
YaYangTeahAuthor Commented:
192.168.100.0/24 is using window server DHCP and 192.168.1.0/24 is using DHCP server in router .Basically I will not change thier DHCP and in the firewall I will turn off the DHCP.
0
MarcusSjogrenCommented:
Hi,

DHCP is irrelevant as long as the hosts are usin the .1 addresses as gateway, but you have to tell the router 100.1 that 192.168.1.0/24 is available via 192.168.100.2
0
YaYangTeahAuthor Commented:
Where to tell the router 100.1 that 192.168.1.0/24 is available via 192.168.100.2 ? Is in the 192.168.100.1 then create the static route ?
0
MarcusSjogrenCommented:
Yes - create a static route in 192.168.100.1
0
YaYangTeahAuthor Commented:
If in the 100.1 router can not adding static route may I know what is the alternative solution, if I just add another gateway in NIC can work ?
0
MarcusSjogrenCommented:
Hi,

No that is definitely not a good solution. What unit (manufacturer + model) is 192.168.100.1?
0
YaYangTeahAuthor Commented:
Thanks..MarcusSjogen ,I just finished the project I was no problem to add the static route in router 192.168.100.1.
In beginning I configure the firewall I define 192.168.100.0 as LAN2 and 192.168.1.0 as LAN1,then I configure the policy allow any LAN1 to LAN2 and I try to ping directly in firewall there was no problem and I able to reach to all the nodes in 192.168.100.0
But I tested the connection in my PC try to reach 192.168.100.0 is failed. After that I try to enable the NAT in the policy then can work .Please advice why need to enable NAT then traffic can flow from 192.168.1.0 to 192.168.100.0.Thanks
0
MarcusSjogrenCommented:
Hi,

I am not sure why that is and I don't know what brand the firewall is and I don't know where you had to enable the NAT.

The only explanation I can come up with is that one of the devices did not have a route to the other network.

NAT translates the source IP to the IP of the egress interface (usually) and then no routing is needed.

Please post the routing table of both units, then maybe I get a better view.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.