Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 28 subscribers
  • Views 1334 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Route WAN traffic through RED tunnel possible?

Eirik Jolle

Not sure if this is possible, so first question is the possibility to route all wan (internet) traffic from one VLAN through RED tunnel? In other words, one VLAN at branch office are going through the RED tunnel to access internet insted of local internet breakout. I made a diagram. The red arrow show traffic flow.

If this is possible, how is this done possible?



This thread was automatically locked due to age.
Parents
  • 0

    What a shame this is not possible with RED. I was looking into exactly the same issue.

    Would it be possible if I'd have the same VLANs on both side? 

  • 0 in reply to 2k9

    Actually thats possible, but not recommended. 

    VLAN can only travel across networks, if you use a Bridge. You can bridge a RED Site to Site Tunnel all together with a ON-Prem Interface (Port1). This would give you the possibility to route a VLAN.

    BUT: why would you do this? Why should the other end actually use this VLAN? For the other end, the VLAN is not important. Only the Layer 3 subnet is important to make routing decisions. So you do not need to forward the VLAN. 

Reply
  • 0 in reply to 2k9

    Actually thats possible, but not recommended. 

    VLAN can only travel across networks, if you use a Bridge. You can bridge a RED Site to Site Tunnel all together with a ON-Prem Interface (Port1). This would give you the possibility to route a VLAN.

    BUT: why would you do this? Why should the other end actually use this VLAN? For the other end, the VLAN is not important. Only the Layer 3 subnet is important to make routing decisions. So you do not need to forward the VLAN. 

Children
No Data