Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 4441 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

2 Astaro RED devices with same Subnet

rvaneynd
Hello,
 
I have a small problem where I have 2 RED devices installed in different locations.
The problem is that the local network in the branch offices (where the RED devices are installed) have the same subnet (192.168.1.x).
 
After installing the RED devices in these locations, only one will work properly. E.g. the remote site (branch office) can talk to the HQ.
 
Btw.. I am using Transparent/Split mode on these RED devices.
 
Is this correct and besides changing the subnet in one branch office, is there another solution?
 
Thank you,
Raoul.


This thread was automatically locked due to age.
Parents
  • 0
    Hello, and welcome to the User BB!

    I think you've identified the only possible workaround - UTM9 only simplifies what needs to be done at HQ, but it can't solve the problem on the other side of the REDs.  Unless you already own NATting routers in the branches that are capable of doing the 1:1-type NAT that UTM9 can do, I bet your most cost-effective solution is to redo the subnetting in your branch offices.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    The correct answer is what Bob has suggested; you need to change the subnet(s) at one or more of the branch offices; 192.168.1.0/24 and 192.168.0.0/24 are very bad choices for business / corporate network addressing.

    Working around it will only create future headaches.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Unfortunately, restructurizing the IP-Ranges is not an option [:(]

    My workaround will be as mentioned to place an nat box between RED and LAN, creating a transfer network which will be unique to each branch. Through the nat, the IPs will than be mapped to the appropriate hosts in the branch LAN.

    Thanks anyways, I'll keep tuned
Reply
  • 0 in reply to BrucekConvergent
    Unfortunately, restructurizing the IP-Ranges is not an option [:(]

    My workaround will be as mentioned to place an nat box between RED and LAN, creating a transfer network which will be unique to each branch. Through the nat, the IPs will than be mapped to the appropriate hosts in the branch LAN.

    Thanks anyways, I'll keep tuned
Children
No Data
Unfiltered HTML