Networks

Ask something
Discussion Locked

Sonicwall VPN question

0 helpful
3 replies

by jasonemmg

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Here is my situation, we have two SonicWall's (a TZ-170 and TZ-210) and would like to be able to use the TZ-170 for
site-to-site VPNs and the TZ-210 for LAN on the same ISP. We do have multiple WAN IPs available if needed.

Is it possible that these SonicWall's can be connected so people connected through the TZ-170 (site-to-site VPN) can access a server on the other SonicWall TZ-210 (LAN)?

Thank you!

3 replies

by robo_dev

A user remotely connected to a site via VPN can access the LAN at that site, and a the existence of a site-to-site VPN should be transparent to the users, whether they are local or remotely connected (via a VPN or other method) The only tricky part would be that the two LANs are different subnets, but that's a simple routing thing.

As long as the TZ supports doing both site-to-site and user VPN at the same time, and it has the processing power to do that, and Sonicwall supports it, it will work.
http://www.sonicwall.com/us/support/3653.html

by jasonemmg

What I'm looking to do is keep my site-to-site VPN clients on the TZ-170 they are already using. I would use the TZ-210 for LAN (employee internet).

How do I allow my clients via sit-to-site to access 1 server on my LAN this way? Can I join the 2 sonicwalls together some how and keep my IP WAN and LAN as is or do I have to get into subnetting,etc..?
Thanks!

by robo_dev

While there may be some advantages to having a router/firewall as an way to connect these two devices together, as long as you got the proper default gateway setup, this would work.

The thing that's missing is getting the users to conect to the Internet. If you do that now with the same device that does the site-to-site VPN, then adding a device for a user VPN is no big deal.

in most cases I've seen this sort of thing done with a Cisco router and a separate firewall.

This discussion is closed to new replies.