Multiple subnets behind LAN Zone

scottrell

Hello,

TZ370 Initial config problem. Gone through the basic set up and watched the videos. Factory defaults and just basic interface configuration--have only two interfaces in play X0 (LAN) and X1 (WAN). I have several subnets functioning on our switched network behind the LAN, routing and IP all working great, until the X0 interface. I have verified by patching a simple switch in place of the X0 interface and all traffic I expect to be routed to the X0 interface get there.

Problem is, the only subnet that seems to work through the firewall is the XO subnet itself. None of the subnets routed through to the XO interface from a different VLAN gets blocked. Again this is a factory default LAN to WAN access rule (any any allow), I haven't even begun to make access rule.

I thought perhaps I needed to define the additional subnets and assign them to the LAN zone, So I tried that, but no luck. Also, they don't appear as an address group for LAN Subnets--which I expected.

What am I missing?

-sc

preston

Hi @scottrell , I presume you are using a L3 Switch on the X0 Subnet ?

If so you need to put all the networks in a group (makes sure they are in the LAN Zone) and create a route policy Policy/Routing Rules

source = any with the destinations = Address Object Group with all the routed subnets via the Gateway ip for this you will need to create another Address object for the Switch IP on the LAN side, Interface X0 & metric 1

the reason the Networks don't show in the LAN Subnets Address object is because that only applies to Interfaces set up in the LAN Zone, not to routed networks.

scottrell

Thank you, that seemed to make things work.

1. Created Address objects for each subnet serviced internally by the L3 switch.
2. Created Address group containing address objects in step 1
3. Created Address object for IP address of the L3 switch on the LAN side of the XO interface
4. Created Routing Rule: any--> [Add Grp in step 2], interface=X0, Gateway=[Add Object in step 3], metric=1

Can you point me to a chapter/section in the Admin guide that touches on this subject? I sort of started down this road by doing step 1 intuitively, but then didn't have a direction to go. I started looking at the Admin guide but soon lost my way.

Thank you!

-sc

preston

@scottrell , There are these below,

https://www.sonicwall.com/support/knowledge-base/how-can-i-configure-static-routes-in-sonicos/170505813100854/

https://www.sonicwall.com/support/technical-documentation/docs/sonicos-7-0-0-0-rules_and_policies/Content/routing-rules-route-advertisements-policies.htm/