This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Layer 3 Routing

Has anyone had to overcome Asymmetric Routing in your LAN similar to these diagrams? There is alot of serial communication traffic being converted to ip traffic then needs to route to a server on the remote lan. 10.141.12.1 uses 10.141.12.86 as the gateway to 10.255.1.71.

Inside the 10.141.12.86 router there is also nats routing 10.255.1.71 to another network.

Can I configure interfaces on the UTM to ignore all Asymmetric Routing or should I get my hp 2510 to do the layer 3 routing totally bypassing any stateful traffic inspection?

This thread was automatically locked due to age.

0 DouglasFoster over 5 years ago

UTM is optimized for filtering traffic between trusted and untrudted devices. You do not want it in the middle of this internal traffic, assuming that both sides are equally trusted. If one side is not trusted, then separate subnets should be used and UTM should see all traffic in both directions.

Asymmetric routing should be avoided as much as possible in any network configuration.

Stateful inspection requires a device to see all traffic in both directions.
Cancel
Vote Up 0 Vote Down

Cancel
0 B.R.O. over 5 years ago in reply to DouglasFoster

Ok this was a nightmare trying to make it work with the UTM in the middle of this internal traffic last year. Its unavoidable and has to be allowed on my network.
Cancel
Vote Up 0 Vote Down

Cancel
0 DouglasFoster over 5 years ago in reply to B.R.O.

Why can't you unplug one of the connections to UTM so that all internal traffic flows through the other router?
Cancel
Vote Up 0 Vote Down

Cancel
0 B.R.O. over 5 years ago in reply to DouglasFoster

I don't understand your question.
Cancel
Vote Up 0 Vote Down

Cancel
0 B.R.O. over 5 years ago in reply to B.R.O.

I have a spare XG 310 that I could load either the UTM or XG firmware on it... could I make it be a layer 3 routing switch not filtering any traffic?
Cancel
Vote Up 0 Vote Down

Cancel