Firewalla 2 Firewalla VPN VLAN Specific

Follow

Fw1

• March 27, 2025 15:04

 

My friend and I have two Firewalla.
Please assume that we are both technically competent, at least at the CCNP level.

A.Site (my site): 
I have my Firewalla Gold Pro (A.FW), which is linked to a VLAN switch (A.SW).
I have a PC (A.PC) and a NAS (A.NAS) on the same local VLAN.

B.Site (my friend's site):
He connects to the internet using a Firewalla Gold (B.FW) linked to a VLAN switch (B.SW).
He's friendly hosting a second NAS (B.NAS) belonging to me for disaster recovery.
He has his own devices in his network, but we don't want to expose those to my access (B.PC).

So far, we have created a VPN connection, but then *ALL* devices from A.site are visible to B.site. 
How can we configure the Firewallas to create a VPN connection specific to VLAN20 in B.Site? 

Alternatively, we could insert a Firewalla Purple between the B.SW and the B.NAS and use it as an endpoint. Still, we hoped for a more straightforward solution.

0

• 

  Firewalla

  • March 27, 2025 15:43

  What you can do is use rules

  1. Block all traffic from the remote site.

  2. Then allow only traffic to VLAN20 on B site. 

  0

  Comment actions Permalink

Please sign in to leave a comment.