RED device - Change metric

Salut Olivier and welcome to the UTM Community!

Please show a picture of the Edit of the RED server for reds1.

Cheers - Bob

Hi Bob !

Thanks for your answer, you know, I'm an old user of the "astaro.org" forum ;)

Below a printscreen :

I tried to change the operation mode to "transparent/split" and put "Internet ipV4" as network but it doesn't help :(

Regards,

Olivier

You can PM ruckus with your old and new email addresses and he can get your old and new "identities" merged.

Now, this is just a WAG - instead of having a separate Interface using reds1, why not bridge reds1 with eth4 since they use the same subnet?

Cheers - Bob

Hi Bob,

Thanks for the tips for my account but it's not so important...

For the RED, it's for "historical" reason : my customer share a MPLS line and default route is pointing to another firewall that I don't manage. It seems Internet is blocked for a weird reason :(

Remote site is working with Remote App (so, they can work) but without Internet access, I can't support them remotly (Teamviewer...). So, my idea was to install a RED and it works, they have Internet access.

MPLS line have to be used for "critical" applications but I discovered that if I disconnect the modem in front of the RED, applications through Remote App become unavailable !

Finally, I found that paquets flows through MPLS in one way but returns through RED...

That's why I need to change metric :)

Olivier

I bet WebAdmin won't let you fix the misconfiguration in the way you're trying.  Perhaps you could present a simple diagram with IPs and subnets noted.

Cheers - Bob

Hi Bob,

You're right, AFAIK there's no settings in Webadmin for that.

Below, a schema with some details :

Default route on Cisco L3 on remote site is configured to send packets to RED (Internet).

A specific route is configured on the same Cisco to reach Datacenter for "critical" applications.

Thank you !

Olivier

Unless I'm missing something, Olivier, there's no way to make this work with this topology.

Au fait, je n'ai pas pigé pourquoi le RED serait nécessaire.

Cheers - Bob

Sometimes, you need to replace a RED with a small Desktop appliance (SG/XG). 

SG with network protection.

XG with Base Protection and two IPsec Tunnel or network protection and RED Tunnel. 

XG would be best case because no subscription needed. 

Toni, you can make a site-to-site tunnel in XG without any paid subscription? - No kidding?!?  Don't you need to purchase a Support subscription?

Cheers - Bob

Hi Bob,

Take a look at this KBA: 

https://community.sophos.com/kb/en-us/131806

Base License includes VPN: IPsec RAS / S2S, SSL VPN RAS / S2S. 

RED, HTML5 is in network protection.

You can purchase a enhanced subscription - but you do not have to. The KBA explains the warranty status.