[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Second IP on WAN connection for VPN with Sonicwall

Posted on 2017-10-12
6
High Priority
?
17 Views
Last Modified: 2017-10-12
I have an office with a single internet connection and they are running a Sonicwall NSA220.  The connection comes in on a single CAT6 cable through the wall (no DSL or cable "modem").

My IPs are xxx.xxx.xxx.10 and xxx.xxx.xxx.15.  I have .10 configured on interface X1.  It is used in a site-to-site VPN.   I'd also like to use .15 in the same site-to-site VPN.  Yes, I know this is weird, but it this case, .10 is blocked (for now) by the Chinese firewall.  So I'd like to have both .10 and .15 used in the same site-to-site connection.

I don't think I can do the normal procedure for handling second IPs by NAT'ing them, since I don't know where to NAT them to.  Obviously I cannot have this second connection come through to X2 or X3.  I can't seem to create a virtual sub-interface under X1 since the IPs are in the same subnet.

What can I do?
0
Comment
Question by:encoad
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 24

Expert Comment

by:Tom Cieslik
Are you really have site-to-site VPN ?
I think site-to-site in configured on Firewall level so doesn't matter what internal IP you have and how many IP's you've configured on your NIC since site-to-site VPN is connecting both routers/firewalls it's always ON.
Can you explain if you have  RRAS server in your network or VPN ins configured on SonicWall ?
If it's on Sonic Wall then is not restricted to internal IP if is in same subnet. So long story short if you have 192.168.1.10 IP on your computer NIC and you have access to other site through VPN then if you will change IP to 192.168.1.15 you still going to be able use VPN, or maybe I don't understand your setting.
0
 
LVL 9

Expert Comment

by:J Spoor
on a SonicWall VPNs can only be terminated on the WAN IP, not on a secondary IP
0
 

Author Comment

by:encoad
Yes, I am really doing a site-to-site VPN.  No RRAS, no client software etc... Connecting two routable internal networks together.

To be honest I never "just tried" to do it without any configuration for the IP... maybe I'm over thinking this.  I'll give it a go.
0
Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

 

Author Comment

by:encoad
J Spoor, are you 100% certain on this?  In order for me to test this I need to do a whole bunch of crazy stuff so I don't lose connectivity, I certainly don't want to waste the time.
0
 
LVL 9

Accepted Solution

by:
J Spoor earned 3000 total points
yes, 100% sure.

you can't NAT it, no workarounds, excep adding a second ISP connection
0
 
LVL 9

Assisted Solution

by:J Spoor
J Spoor earned 3000 total points
so you are stuck with your .10 X1 IP, unless you re-ip it
0

Featured Post

Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

Join & Write a Comment

Network traffic routing plays key role in your network, if you have single site with heavy browsing or multiple sites, replicating important application data from your Primary Default Gateway ,you have to route your other network traffic from your p…
Will you be ready when the clock on GDPR compliance runs out? Is GDPR even something you need to worry about? Find out more about the upcoming regulation changes and download our comprehensive GDPR checklist today !
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question