I havent tried this but i think logically it should work.
 
have you tried not telling the Sonicwall that the internal is /27.  Just set it up as a normal bridge/firewall with the lan ip being its ip.  The pub ip you planned on giving it.
 
the /27 should be on all clients and make sure the ip that is on the sonicwall is in the /27 range.  the clients will be happy this way they can only communicate with ips in the /27 range, and the sonicwall should be as well because it can talk to all ips on the /24 range.
 
let us know.
-----Original Message-----
From: John Tolmachoff [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 18, 2002 1:34 PM
To: [EMAIL PROTECTED]
Subject: RE: [SonicWALL]- lan and wan ip identical

You probably have to run it through the DMZ port instead of the Internal port.

 

John Tolmachoff

IT Manager, Network Engineer

211 E. Imperial Hwy., Suite 106

Fullerton, CA  92835

714-578-7999, ext. 104

[EMAIL PROTECTED]

www.reliancesoft.com

 

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Andrew Kaplan
Sent:
Thursday, April 18, 2002 1:07 PM
To: [EMAIL PROTECTED]
Subject: [SonicWALL]- lan and wan ip identical

 

I'm just setting up a my SonicWall 200. I'm on a public network 63.237.136.0/24. I'm trying to use the 63.237.136.224/27 network for boxes behind the firewall. I can't figure out how to put two different /27 addresses on the box. If I put on address on the lan it automatically appears on the wan interface. I don't want to use NAT but want each box to have a /27 address.

 

I know I'm doing something silly. I just don't know what it is.

 

Andrew P. Kaplan
Network Administrator
CyberShore, Inc.
http://www.cshore.com


'Only the dead have seen the end of war.'  Plato                                  


 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Chris Hunt
Sent:
Thursday, April 18, 2002 4:00 PM
To: [EMAIL PROTECTED]
Subject: Re: [SonicWALL]- Rule 0?

I looked in the archives as I posted a "What is Rule 0" awhile back  ;)

It's the default rule.  So that tells me that your rules to allow traffic from the DMZ to the LAN and not being use.

Chris

At
02:03 PM 04/18/2002 -0500, you wrote:

I am trying to ping from a DMZ address to a LAN address.  I have a route set in my router that Dest=192.168.155.1/24 Gateway=204.155.155.125 which is the public IP address of the SonicWall.  In the SonicWall Log  I get ICMP Packet Dropped 204.155.155.111, 8 DMZ  192.168.155.1, 8 LAN  "Ping" Rule 0.
 
Where/what the heck is Rule 0?  I have rules that allow traffic from the DMZ to LAN but it still fails.  Any help would be appreciated.
 
Thanks,

Kevin M. Donovan, MCSE
Network Support Specialist
IntelliWare Systems, Inc.
 
Phone (817) 277-0800 x228

Reply via email to