This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't get RED UTM to RED UTM bridging to work

Hi,

I am trying to have connected my two UTMs (9.315-2) via a RED tunnel, using the same subnet 192.168.0.0 / 24 and bridging.

After having spent several hours and red every thread i found in relation to that I am giving up an asking for help.

What I have is:
- working red tunnel between UMT MUC (IP 1) and UTM NYC (IP 2)
- LANs connected to each UTM with same above subnet 192.168.0.0 / 24, but different gateways (IP 1 / IP 2, see above), no conflicting IPs. 
- both UMTs do DHCP for non conflicting ranges within the same subnet.
- a bridged internal interface with reds1 / redc1 on each side
- a firewall rule on each side internal -> all -> internal -> allow
- NO masquerading rule internal - internal (but had tried that too)
- Intrusion Prevention, Application Control Advanced Threat Protection are OFF.

Result / Status qou:
- working ping from each UTM to the other UTM
- UTM NYC can ping devices in the remote network but not the other way around (! even so i cannot find any relevant difference in configuration)
- no UTM connected network device can ping or TCP connect to devices behind the remote UTM
- not evidence of allowed or denied traffic in firewall logs 

Is there anything else if have overseen or where i could start investigating any further ?

Thanks a lot for any hints in advance. [:)]


This thread was automatically locked due to age.
Parents
  • I expected that there would be a conflict between the two DHCP servers.  Frankly, I don't understand why there doesn't seem to be one.  Hopefully, someone else will come by and straighten this out.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • I expected that there would be a conflict between the two DHCP servers.  Frankly, I don't understand why there doesn't seem to be one.  Hopefully, someone else will come by and straighten this out.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data