Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

(eta salutation, which keeps getting eaten.)

Hi, all.

I see a bunch of related questions, so I'm hesitant to ask, but:

I have a situation where I have a Sonicwall NSA220 serving as firewall/router for two internal subnets to two external WAN connections. In some locations this is two separate ISPs. In others, it's the same ISP but with multiple circuits.

The problem is that one ISP has been unable to provide unique subnets for each WAN interface.

Is there any possibility that I might be able to bond the two WAN interfaces into a single virtual interface, and then use source-routing to get internal subnets communicating out the appropriate physical interface? Or even just use traffic-shaping to give each internal network appropriate shared bandwidth? I haven't found anything in the docs, but it seemed like it might be worth asking.

Thanks for any help! -Steve.

share|improve this question
add comment

2 Answers

If you have addidtional public IPs in the same subnet range: after assigning one public IP to the WAN interface, you can add additional public IPs by creating a WAN address objects under Network--> Address objects.

After that, you can bind that WAN address object with private IP on LAN using Access rules and NAT policies.

https://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=4535

Or, if you have a LAN range that needs to go to a specific WAN IP, Network--> Routing, and create a new rule:

  • Source: the LAN range
  • Dest: Any
  • service: Any
  • Gateway: WAN IP
share|improve this answer
    
Thanks, but that's not quite the problem. I have multiple WAN IPs on separate interfaces. Since they're in the same subnet, one of the interfaces is not being brought up, with a "subnet already assigned to other interface" error. I was hoping I might be able to bond the two WAN interfaces somehow, although I see nothing in the docs that suggests it's possible. I'd be happy to be told I'm missing the blindingly obvious, though. –  Ttamsen Apr 19 '12 at 16:11
    
Try searching the SonicOS administrator's manual for WAN link aggrigation. You might have to contact sonicwall support about this one, though. –  Force Flow Apr 19 '12 at 17:42
add comment

You may try the following setup:

Install a switch in front of SW and connect two ISP connections from the same subnet).

ISP link 1------
                |--switch---|--sonicwall--|----LAN
ISP link 2 -----

On SW, assign a WAN IP from the same subnet.

Is WAN Gateway same for both Links?

If there are two, you may be able to setup two outbound routes for each Link.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.