This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RED Tunnel between UTM sites?

I have a question regarding RED tunneling, I currently use Site to Site SSL VPN between UTM's which works but I wanted to know if I used RED tunneling instead is there a way to route traffic so that hosts on site 1 can browse devices on site 2 even if they are on different subnets?  Or do I need to have both sites on the same subnet to acheive this?

If i need to use same subnet ill have to do a bit of DHCP trickery to make sure no Hosts use same IP.

Also what are the advantages of RED tunneling over Site to Site VPN?

The main reason im looking into this is so that i can use a media server on site 2 on TV's on Site 1, currently they cant see the media server.  Unless anyone knows how i might do this with my current Site to Site VPN with sep subnets at each site?  I can access hosts on the opposite sites but i have to point to the host address, the media devices cannot detect the DLNA server on there own.

I read about Multicast routing, would this acheive what i want?  How would I go about setting this up?  Do i use existing Interfaces for the Multicast interfaces or do I setup new ones?  Or should i use the Multicast RP route?  what host should be set as the RP router?

Thanks

JK

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

I have a question regarding RED tunneling, I currently use Site to Site SSL VPN between UTM's which works but I wanted to know if I used RED tunneling instead is there a way to route traffic so that hosts on site 1 can browse devices on site 2 even if they are on different subnets? Or do I need to have both sites on the same subnet to acheive this?
Yes, it is always preferred to have different connected sites on different subnets.  Otherwise routing becomes a bit of a mess.

Also what are the advantages of RED tunneling over Site to Site VPN?
None really.  It's just a proprietary protocol SSL VPN tunnel is all.

currently they cant see the media server
I'm guessing broadcast (can't traverse subnets) or multicast (your going to need gear that can act as an RP router and a fairly high level of knowledge to implement) traffic.

I read about Multicast routing, would this achieve what i want? How would I go about setting this up? Do i use existing Interfaces for the Multicast interfaces or do I setup new ones? Or should i use the Multicast RP route? what host should be set as the RP router?
Answers my last question.  Over the years there's been a tiny handful of threads about multicast routing.  Use google to search this forum to find them.  This is just a rarely used feature, so there isn't much collective knowledge on the implementation.  In 10 years on this forum and a few years at Astaro/Sophos, I've only seen a couple successful implementations, setup using Cisco gear as RP Routers.

If you figure it out, feel free to do a walkthrough writeup post.  Usually 1-3 people a year have questions about it.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 JohnKenny over 9 years ago in reply to Scott_Klassen

Thanks, Ill stick with what i am using and look into Multicast routing. Sophos's kb article just didnt help! lol

JK

CompKickers
Cancel
Vote Up 0 Vote Down

Cancel