Routing

Hi, Michael, and welcome to the UTM Community!

Perhaps you could show a simple stick diagram with IPs and subnets noted.

Cheers - Bob

Hey Michael, I'm with Bob pictures are good, done in crayon even better..anyway it sounds like you may just need a route added to the Edgmax that points to 192.168.102.25 as it's next hop. Something like "ip route 192.168.212.0 255.255.255.0 192.168.102.25" Then making sure the VPN is configured with the necessary interesting traffic. Same on the other side only inverse for the phone subnets, just "connect the dots" if you will.

cooper

I left out the fact that on the UTM at 102.25 you need a static route statement for "network 192.168.102.0 255.255.255.0 (next hop 192.168.102.1" to get back inside to the phones.

I put the route statement in Standard Static Routes.  Is this correct?  (See Picture).  I can ping both ways but my traffic on my phones are still not flowing.

The internal routing is key, this drawing is helpful yet does raise more questions. Let me look this over and come back to you, it looks like you may have some additional VLAN routing and/or segmentation issues. From this drawing there appear to be two paths from the 102.2 phone to the UTM. I'll come back to you with a drawing that reflects my thoughts.

It does appear that way, but the 212 network should never flow though the EdgeMax Routers.  I do not have a path set up at the second location on the edgemax for the 212 network as it is not needed.  I do have the route set up on the first location just to point it to the 192.168.102.25.

VLANS and VPN.docx

Agreed you aren't bridging so the 212 network won't be defined at the second location. Check out the diagram I uploaded, I've made some assumptions and suggestions compared to your original diagram. My network consists of multiple locations utilizing the same parameters you've outlined. I have UTM's with multiple interfaces for Voice and Data with internal routers connected by Internet based VPNs.

I received your device.  I really understand what you are saying on the 192.168.12 network about needing routing switch.  On this side I do have multiple interfaces (2) setup for internal and they seem to be passing traffic fine.  On this side my default gateway is the UTM so that shouldn't be a problem.  My Problem is either routing on the other UTM or some port being blocked.

Let's PM for further discussion.