Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 5 subscribers
  • Views 10564 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Dual WAN on same subnet no connection to WAN2

TimAudenaert

Hi,


We have 2 WAN connection with each a fixed IP in the same subnet and the same default gateway

WAN1: DHCP FIX IP 81.82.A.X /18  DG :81.82.z.1

WAN2: DHCP FIX IP 81.82.B.Y /18  DG: 81.82.z.1

WAN1 works fine but i even can't ping to interface of WAN2

on our old fortinet we had to enable allow-subnet-overlap

WAN1 is used for company internet and incoming port forwards

WAN2 is used for additional HTTP/HTTPS trafic and site to site VPNs

thanks in advance for you help



This thread was automatically locked due to age.
Parents
  • 0
    It is better to use "Additional Addresses" and simply bind the IP from WAN2 to WAN1 as additional IP. The UTM security concept belongs to ip addresses and not to interfaces or zones. There are no disadvantages in this case.

     

    Sophos Certified Architect (UTM + XG)

Reply
  • 0
    It is better to use "Additional Addresses" and simply bind the IP from WAN2 to WAN1 as additional IP. The UTM security concept belongs to ip addresses and not to interfaces or zones. There are no disadvantages in this case.

     

    Sophos Certified Architect (UTM + XG)

Children
  • 0 in reply to CS
    He can't do that, CS, since these are two separate, physical connections. Then again, perhaps with a switch in front of the UTM, that might work if he doesn't have to use DHCP. The downside would be the loss of the ability to control outbound traffic with Multipath rules.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    I have neve seen such a configuration. Maybe a simple NAT router with a different transit network may help.

     

    Sophos Certified Architect (UTM + XG)

Cookie Information Banner