Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How would I force a set of people based on their IP to use a specific WAN port using a SonicWall FW? Also, how do I setup the second ISP to work on x2?

Using a SonicWall NSA240 Enhanced with 5.6 We want to force groupA to use ISP1 and groupB to use ISP2. All of the "groups" use the same subnet. 192.168.0.x/24

Currently every one goes out ISP1 that has 5 static IP's. The new additional ISP has it's own static IP.

share|improve this question

3 Answers 3

up vote 7 down vote accepted

This can be done, but your users need to either be on differing subnets, or static IPs.

This is handled at the Routing Policy level. Create an Address Group for the subnets (or static IPs) you want routed by X2 instead of X1. Then go to the Routing tab. Create a new Routing Policy that states that anything from that one Address Group will egress through the X2 interface/IP. Set the Interface to X2.

share|improve this answer
This is the correct answer. HOWEVER, in SonicOS Enhanced, you can create address objects based on IP address ranges that don't have to conform to subnet boundaries. (i.e. on a subnet with a 24 bit mask) –  Safado Aug 5 '11 at 22:51
Thanx to the both of you! It's working like a charm... I setup the 2 address ranges and then put them into an address group. Then in the routing policies I specied the source as my new group to use the X2 Default gateway. I've tested addresses both in and outside of the group using www.whatismyip.com and it's working as expected. Again thanx for your help! –  cwheeler33 Aug 8 '11 at 16:42

Not a Sonicwall specific answer, but you want to look for "Source Based Routing" in your Sonicwall docs. Sorry I'm not a Sonicwall guy, but this should point you in the right direction.

share|improve this answer

I have done this on my system but only some things are working now. Netflix and Hulu do not work from that network but on the primary group it works fine any thoughts

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.