Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


configure sonicwall nsa connected to a L3 switch

Posted on 2016-11-11
Medium Priority
Last Modified: 2016-12-01
Hi, we currently have a flat vlan on the sonicwall firewall.  

We're adding a L3 swtich that is already configured to handle routing internally so i dont need the sonicwall to be configured as the router.
From what i understand, I don't need to create any additional vlan's on the sonicwall. I just need to create address objects with the various vlans and create route policies (static routes) and tell it to point to the l3 switch as my next hop.    Wanted to get an example from someone on what that would look like:  (ex. source, destination, etc).

the sonicwall will have the firewall vlan ip of
the core switch will have the firewall vlan ip of
the core has several vlan's configured already for routing:  vlan 20 (, vlan 30 (, and so forth.
Question: in the sonicwall, i'll be changing the X0 (lan) ip to
then create the route policies:  can someone detail the route policy on what it would look like on the sonicwall to confirm what i believe it to be?
Question by:seven45
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
LVL 79

Expert Comment

ID: 41884669
You would define the switch port to which you would connect the sonic wall as a trunk
You then would define the vlans and the IP ranges/vlan firewall ip on this vlan)
If the switch already has its routing rules, you need only deal with how the vlans access the outside, or are you looking to transition the routing from being defined/managed on the switch to being managed by the sonicwall?

Where is your DHCP server or are all ips static?
LVL 79

Assisted Solution

arnold earned 1000 total points (awarded by participants)
ID: 41884672
Checking Dell support pages, see if the below
LVL 39

Accepted Solution

Aaron Tomosky earned 1000 total points (awarded by participants)
ID: 41884703
Make the address objects, I like one for each vlan subnet, and one for the l3 switch interface IP on the subnet the sonicwall is connected to it on.
Source any
Dest vlan subnet
Service any
Gateway l3 switch

You can make one for each vlan or group them if you have a lot.
LVL 39

Expert Comment

by:Aaron Tomosky
ID: 41908425
Solid advice.

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While it is possible to put two routes in place with the secondary having a higher metric, this may not always work. In the event of a failure that does not bring down the physical interface on the router the primary route is not removed. There is a…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question