This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Internal subnets restricted to specific external interfaces

I have a site where there are 2 internal subnets. Each subnet needs to use a specific external interface. From the firewall I can traceroute to the Internet over either interface, but from the network, I can access the Internet only over the original External Interface. When connected to the 2nd subnet and using the second interface for the gateway, I am going nowhere.

This thread was automatically locked due to age.

Parents

0 BAlfson over 10 years ago

I think your original approach would have worked if you're used a Gateway Route instead of an Interface Route. See Policy Route - a second WAN Connection: Astaro Security Gateway. Scott's prescription is the "modern" way to do it though, and is preferred.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 10 years ago

I think your original approach would have worked if you're used a Gateway Route instead of an Interface Route. See Policy Route - a second WAN Connection: Astaro Security Gateway. Scott's prescription is the "modern" way to do it though, and is preferred.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 mrainey over 10 years ago in reply to BAlfson

Thanks for the suggestions. The Multipath rule works for one of the subnets and interfaces. There is a complexity to the second config. Both Internet services are DSL, but 1 is an 8 block so can be configured as PPPoE interface the way one normally does things: External IP Address with an External GW. The second WAN is a single IP address so has to be configured using the DSL routers LAN address: So, using defaults, the DSL modem at 192.168.01, the UTM Interface is at 192.168.0.2. Say I have a subnet 192.168.10.0. If I multipath it to the Interface at 0.2 it does not see 0.1 no traffic goes out. If I policy route it to 0.1 it still does not go out. Is there any way to make this configuration work?
Cancel
Vote Up 0 Vote Down

Cancel