routing traffic from FWG gold to another remote site with FWA gold

Follow

b8cons

• December 28, 2022 03:23

i have 2 FWA Gold

I have a PC on 192.168.165.131 on FWA Gold, but trying to reach a remote site device (192.168.159.25), the local FWA gold interface 192.168.65.5 (LAN) connects to a GW that connects to remote site 192.168.59.10 (not a firewall int, but a VeloCloud) but it connects to a FWA on 192.168.59.1 (LAN on remote site).  i added a static route on local PC (192.168.165.131) (route add 192.168.159.0 mask 255.255.255.0 192.168.65.5).  in the local firewalla, i've added the PC to a group (VLAN TEST) and rules {allow IP address 192.168.45.5 on group VLAN TEST Bi-Directional Always}, and on remote site FWA {allow 192.168.159.25 on network 192.168.59.0 Bi-directional always } but I can't get traffic to pass through (pinging from 192.168.165.131 to 192.168.159.25)

Sorry.  This is so confusing, but can someone give me some pointers?

thanks

0

• 

  Firewalla

  • December 28, 2022 15:53

  Are you using site-to-site VPN? I am not getting how the sites are connected. 

  0

  Comment actions Permalink
• 

  b8cons

  • December 29, 2022 19:36

  we're connecting site to site using VMware VeloCloud SD-wan devices.

  each of the FWAs are behind the veloclouds.

  0

  Comment actions Permalink
• 

  Firewalla

  • December 30, 2022 17:09

  May be best to draw a picture / topology, it is harder to visualize from words to network maps

  0

  Comment actions Permalink
• 

  b8cons

  • January 04, 2023 01:53

  hope this helps

  

  0

  Comment actions Permalink
• 

  b8cons

  • January 18, 2023 22:33

  ok, basically for any typical Firewalla Gold set up, what would a basic rule look like to set up so one VLAN can communicate with another VLAN?

  for example

  fwa port 1 -192.168.0.1

  with client - 192.168.0.5

  fwa port 2 - 192.168.1.1

  client - 192.168.1.5

   

  0

  Comment actions Permalink
• 

  Firewalla

  • January 18, 2023 23:30

  First on your diagram, it is definitly not typical, since you are connecting two networks on the same switch, wouldn't you have issues with DHCP? since you have one PC connecting to two different networks?

  As of VLAN, by default, there is NO block between VLAN's. There is no additional setup. 

  0

  Comment actions Permalink

Please sign in to leave a comment.