Where to put things

I know this doesnt make sense, perhaps i can decribe how i have to fix or configure something on the network would help...

BRO,

try to put the IP on the first network diagram where Sonicwall is in place. The other 2 diagrams does not help (too much confusion with physical ports).

Thanks

Here is the Layout with private ip addresses

Here it is with public ip addresses

Maybe this would work.  Instead of using the HA unit, I make it a transparent bridge like this...

BRO,

thanks for sharing your network diagrams. Can you put the subnet inside the Private network map?

I would recommend you to keep the HA and to keep XG in routing mode.

Thanks

Here you go.

I put the internet connection to the MEDVPN.  It need full ip allow all traffic to 6 cisco host end routers.

I put the internet connection to the MEDVPN.  It need full ip allow all traffic to 6 cisco host end routers.

Here is one way I tried to configure the XG....

On my test unit I created a Bridge LAN bridging ports 1,4,5,6 to the LAN Zone

Static Routes for my lan for each vlan (actually entered 20 routes)

10.x.14.1/255.255.255.0 gateway: none interface= (LAN- Bridge)

10.x.15.1/255.255.255.0 gateway: none interface= (LAN- Bridge)

DHCP Relay for my DHCP Server to provide IPs address for the LAN-Bridge.

Port 7 - Public_Wifi  (because of bridge lan a new interface is needed for public_wif to be separate from LAN Zone.

(looking at the R1 router there are permit acls stateless traffic allows like IPaccess-list 190 permit ip 10.x.x.0 0.0.1.255 10.x.x.64 0.0.0.63)

use putty client

access XG via SSH Port 22

Login

select #4 device console  (now all lan traffic will be premitted and the nat subnets function)

set advanced-firewall bypass-stateful-firewall-config add source_network 10.X.X.0 source_netmask X.X.X.X dest_network 10.X.X.64 dest_netmask X.X.X.X

set advanced-firewall bypass-stateful-firewall-config add source_network 10.X.X.64 source_netmask X.X.X.X dest_network 10.x.x.0 dest_netmask X.X.X.X

Connect R1 to port 4 (Bridge LAN bridging ports 1,4,5,6 to the LAN Zone)

Connect R2 to port 5 (Bridge LAN bridging ports 1,4,5,6 to the LAN Zone)

Connect MEDVPN to port 6 (Bridge LAN bridging ports 1,4,5,6 to the LAN Zone)

All good except R2 and MEDVPN can't get out through the internet.

also static route for Datacenter Network gateway=HSRP Router, Interface=LAN Bridge