Firewall – How to configure remote access to multiple subnets behind a SonicWALL NSA 2400

arpfirewallroutingsonicwallsubnet

I have a client that uses a SonicWALL NSA 2400 as their firewall. I need to setup a second LAN subnet for a handful of PC. Management has decided that there should be a second subnet even though intend to allow access across the two subnets – I know…

I'm having trouble getting communication across the 2 subnets. I can ping each gateway, but I cannot ping or seem to route traffic fron subnet A to subnet B.

Here is my current setup:

  • X0 Interface: LAN zone with IP addres 192.168.1.1
  • X1 Interface: WAN zone with WAN IP address
  • X2 Interface: LAN zone with IP address 192.168.75.1

I have configured ARP and routes for the secondar subnet (X2) according to this SonicWALL KB article: http://www.sonicwall.com/downloads/supporting_multiple_firewalled_subnets_on_sonicos_enhanced.pdf using "Example 1".

At this point I don't minding if I have to throw the SonicWALL GVC software VPN client into the mix to make it work. It feel like I have an Access Rule issue, but for testing I made LAN > LAN, WAN > LAN and VPN > LAN rules wide open with the same results.

Best Answer

I'm not familiar with the NSA-series, but the article you followed was instructions how to get two subnets to talk behind ONE physical interface. You're setup is two physically separate LAN ports. It seems like setting up a static route on both SonicWalls should allow them to communicate.

Related Topic