This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Two interfaces with different subnet - what is the right config?

Massimiliano Busano over 7 years ago

Hello to all
I'm migrating from UTM9.5 to the new XG with a SG210. I have a problem communicating 2 networks.

I have two different LAN, One for computers and servers and the other for VoIP telephony. This is the conf:

LAN - 192.168.1.0

VOiP - 192.168.2.0

Different switch for the 2 networks and different physics port in the UTM.

Now i want create a rule with specific services that connects the two networks, without the SIP packets of the voip network ending up in the LAN.

I tried different methods but I still do not see the voip network from the lan network and vice versa. If I try to ping an IP or enter the phones web panel it will not work. The two networks go to internet correctly.

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 7 years ago

Hi,

as far as I can see you are trying to do too much with one rule. You need a rule for each direction.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Massimiliano Busano over 7 years ago in reply to rfcat_vk

Thanks rfcat_vk I tried to fix the rule according to your instructions but the same still does not work..
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to Massimiliano Busano

Hi,

where are these rules in the process path? They will need to be at the top.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to Massimiliano Busano

Massimiliano,

as Ian wrote, make sure to create 2 separate rules (lan to voip) and (voip to lan). Also make sure as Zone, select LAN and not any.

I also have seen some issue when the XG language is not english.

Move the 2 rules at the top and show us a drop-packet-capture output or firewall logs.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to lferrara

Thank you Luk,

my Italian is not that good to assist further than I did.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Massimiliano Busano over 7 years ago in reply to lferrara

Hi guys

thanks for your great support! I have switch language to english to be clear... and i have made some screenshot following your suggestions... i have tried to change source from VOiP to LAN but didn't work anyway...
Cancel
Vote Up 0 Vote Down

Cancel
0 Mitre Realty Realty over 6 years ago in reply to Massimiliano Busano

estou com mesmo problema.

você conseguiu resolver seu problema ?
Cancel
Vote Up 0 Vote Down

Cancel