Multihome FVS318N

[19805136]

Hi all,

I have to connect my lan, LAN-01, to another, LAN-02, that is physically close to mine but separate. the two lan have different gateway/dns/Internet-WAN connection.

I would connect the two LAN with my Firewall FVS318n, so I could view LAN-02's PCs from my lan.


Current Set up
LAN-01
Subnet ID: 192.168.1.0
Mask: 255.255.255.0
firewall FVS318n:

IP address: 192.168.1.1 (FVS318n is the gateway for my LAN-01)
IP WAN: 192.168.10.2 (connected to a modem router for WAN/internet connection)

PCs are in DHCP: from IP: 192.168.1.10 to 192.168.1.254

LAN-02
Subnet ID: 10.105.34.0
Mask: 255.255.255.0
IP gateway: 10.105.34.1
Pc's are not in DHCP:
IP FVS318n: 10.105.34.5

My issue
Both with vlan-intervlan configuration and with multihome configuration:
I can ping from ex. 192.168.1.101 to only 10.105.34.5 (my FVS318n) but not entire LAn-02's subnet 10.105.34.0.
I can ping from FVS318n to entire subnet 10.105.34.0.

Even if FVS318 is my gateway, do I perhaps need a static route on my workstations?

Any suggestions are appreciated.

best regards
ulis

[jmizoguchi]

did you look Vlan rules just like in/out bound rules there should be one.

I know my prosecure UTM has that option other than specify the VLAN ID, DHCP, inter VLAN options

[19805136]

Sorry for my late reply and
Thank you for your suggestion

but No rules for vlans in FVS318n
only for LAN/WAN LAN/DMZ WAN/DMZ.

I controlled also the route and seems ok.
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
127.0.0.1 127.0.0.1 255.255.255.255 UGH 1 0 0 lo
10.105.34.0 0.0.0.0 255.255.255.0 U 0 0 0 bdg2
10.105.34.0 10.105.34.5 255.255.255.0 UG 1 0 0 bdg2
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 bdg1
192.168.1.0 192.168.1.1 255.255.255.0 UG 1 0 0 bdg1
192.168.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
192.168.10.0 192.168.10.2 255.255.255.0 UG 1 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.10.1 0.0.0.0 UG 0 0 0 eth1


Any other suggestions are welcome