Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 2 subscribers
  • Views 9148 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RED on an Interface NOT used as default gateway route

bjoern.wekerle
Hello,

we want to use an additional interface for the Red devices. Our default GW is using a different interface, so we setted up the following:

-Policy Gateway Route with source interface: any, Source network: [IPexclusiveREDinterface], Service: any, Destination Network: any, Gateway: [IPnexthopREDinterface]
-RED Setup using the [IPexclusiveREDinterface] as UTM Hostname

The RED10 connects to our UTM. I can ping the Ethernet Interface of the RED..but I can't reach all the Layer 2 devices behind the RED...

We do have some other reds connected over another interface, so right now we want to use two red connecting interfaces. These reds are working properly.


This thread was automatically locked due to age.
Parents
  • 0
    I'm not able to make a drawing from your description.  Is it as follows?

    {ISP Gateway IP}{LAN}



    Our company policy forced us to configure the default route on the UTM to the LAN connected interface.

    Do you mean that the interface with a default gateway is the LAN interface?

    After i changed the setting to ">" 

    The setting for what?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Good Day!

    OK..so here's my drawing:

    Internet:
    ISPGatewayIP(212.9.w.x) for IPsec
                                                  UTMeth1(IP212.9.w.2/IP212.9.y.2)
    ISPGatewayIP(212.9.y.z) for the RED

    LAN:
    UTMeth0(10.6.10.5)LAN-Gateway

    Special Settings are:
    -LAN Gateway is the default gateway of the UTM.
    -IPsec Tunnels are configrued with static routes to the ISP Gateway.

    To the questions:
    >>The setting for what?
    I mean the settings of the policy route mentioned in the text part.

    >>Do you mean that the interface with a default gateway is the LAN interface?
    Yes, that's right!
Reply
  • 0 in reply to BAlfson
    Good Day!

    OK..so here's my drawing:

    Internet:
    ISPGatewayIP(212.9.w.x) for IPsec
                                                  UTMeth1(IP212.9.w.2/IP212.9.y.2)
    ISPGatewayIP(212.9.y.z) for the RED

    LAN:
    UTMeth0(10.6.10.5)LAN-Gateway

    Special Settings are:
    -LAN Gateway is the default gateway of the UTM.
    -IPsec Tunnels are configrued with static routes to the ISP Gateway.

    To the questions:
    >>The setting for what?
    I mean the settings of the policy route mentioned in the text part.

    >>Do you mean that the interface with a default gateway is the LAN interface?
    Yes, that's right!
Children
No Data
Unfiltered HTML