This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Two interfaces with different subnet - what is the right config?

Massimiliano Busano over 7 years ago

Hello to all
I'm migrating from UTM9.5 to the new XG with a SG210. I have a problem communicating 2 networks.

I have two different LAN, One for computers and servers and the other for VoIP telephony. This is the conf:

LAN - 192.168.1.0

VOiP - 192.168.2.0

Different switch for the 2 networks and different physics port in the UTM.

Now i want create a rule with specific services that connects the two networks, without the SIP packets of the voip network ending up in the LAN.

I tried different methods but I still do not see the voip network from the lan network and vice versa. If I try to ping an IP or enter the phones web panel it will not work. The two networks go to internet correctly.

This thread was automatically locked due to age.

0 rfcat_vk over 7 years ago

Hi,

as far as I can see you are trying to do too much with one rule. You need a rule for each direction.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Massimiliano Busano over 7 years ago in reply to rfcat_vk

Thanks rfcat_vk I tried to fix the rule according to your instructions but the same still does not work..
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to Massimiliano Busano

Hi,

where are these rules in the process path? They will need to be at the top.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to Massimiliano Busano

Massimiliano,

as Ian wrote, make sure to create 2 separate rules (lan to voip) and (voip to lan). Also make sure as Zone, select LAN and not any.

I also have seen some issue when the XG language is not english.

Move the 2 rules at the top and show us a drop-packet-capture output or firewall logs.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to lferrara

Thank you Luk,

my Italian is not that good to assist further than I did.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Massimiliano Busano over 7 years ago in reply to lferrara

Hi guys

thanks for your great support! I have switch language to english to be clear... and i have made some screenshot following your suggestions... i have tried to change source from VOiP to LAN but didn't work anyway...
Cancel
Vote Up 0 Vote Down

Cancel
0 Mitre Realty Realty over 6 years ago in reply to Massimiliano Busano

estou com mesmo problema.

você conseguiu resolver seu problema ?
Cancel
Vote Up 0 Vote Down

Cancel