Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".


2 Domains Single Network

Ok, this is probably a stupid question but I have never came across this scenario and wondering if it is possible.

Scenario: Shared office space with 2 companies on single network physically.

All the servers, workstations, etc. are connected on the same network cables through out the office space but will have a mix on any given day of employees from the 2 companies. Their devices are associated to their own respective domains.

Is there a way to configure the switches to route traffic to/from a PC on Domain A to the Domain A's firewall and vice versa for Domain B? I am looking at a hybrid business model where the desks will not be permanent but rather a floating desk as first come, first serve. I know I can setup VLANs but the part my brain is not able to comprehend is how to route the traffic to isolate the 2 domains.

Category: Switches


  • Options
    MitatOngeMitatOnge All-Knowing Sage ✭✭✭✭

    Hi @Blacksuit

    What is your switch brand and models?

  • Options
    BlacksuitBlacksuit Newbie ✭
    edited February 2022

    For the Access SW they are Aruba 2540 and 2930 for Core switch connecing to SonicWall TZ370 and Domain B will be a TZ270.

    Domain A has managed switches

    Domain B has unmanaged switches

  • Options
    MitatOngeMitatOnge All-Knowing Sage ✭✭✭✭
  • Options
    BlacksuitBlacksuit Newbie ✭

    WOW they do not make things clear in their documentation...I am trying to setup RADIUS authentication and authorization with the 2540 but once again their documentation is very cryptic to me. When I research the configuration setup it keeps referencing Clearpass. Is this required?

  • Options
    AjishlalAjishlal Community Legend ✭✭✭✭✭


    As I understood that, you have 2 domain users and they are in different VLAN and you want to bypass their internet traffic through the dedicated firewall for each domain.

    If this is the scenario, You have to do some configuration in your Core Switch.

    First you have to create a default route in the core switch and point the default route to the Firewall Domain A.

    Then you have to configure in Core Switch, PBR and a nexthope for the Domain B network and point the nexthope to Firewall Domain B.

  • Options
    MitatOngeMitatOnge All-Knowing Sage ✭✭✭✭

    No need clearpass.

    you sould add Network policy for domainUPNSuffixes each domains.

    A domain user wants to login to domain, RAdius server catch the request and check the domainUPNSuffixes if user is A domain user radius assign to Domain A vlan. if not Raidus assign to Domain B vlan.

  • Options
    ArkwrightArkwright All-Knowing Sage ✭✭✭✭

    Do the network separation on the device labelled "Access Sw". Domain A goes in one [or more] VLANs, Domain B goes in one [or more] other VLANs. Domain A's VLANs go to the relevant Sonicwall, etc. No need for any L3 capabilities on your switches here, all L3 is handled by the relevant Sonicwall.

Sign In or Register to comment.