topic Re: Multiple subnets on SA520 in Network Security

Multiple subnets on SA520

gileswright01 — Mon, 11 Mar 2019 22:11:15 GMT

Hi - I am new to Cisco products. We have currently got a Netgear FVX538 running in front of a few servers. We currently have 2 ranges of IP addresses provided to us on 2 separate subnets. We configured the netgear box with the first IP addresses of each subnet as the IP address of each of the primary and secondary LANs. This then allowed us to set the gateway addresses of servers on the network to either of those 2 addresses, depending on it's range.

This all worked fine - except for the fact that the Netgear box is incredibly flakey, so we decided to get a Cisco box.

We have gone for the SA520, which I have been trying to configure this afternoon. Unfortunately I am now having concerns as to whether it is possible to configure 2 separate subnets internally on this box in the same way we have done with the netgear box. If I am right and this is not possible, does anyone know if there is a way of achieving what we want? ie - classical routing, one incoming WAN interface with multiple subnets?

Thanks,

Giles

Re: Multiple subnets on SA520

Julio Carvajal — Fri, 06 Jan 2012 17:50:19 GMT

Hello Giles,

Here is one link that will help you on this, you can do some classical routing or even RIP.

http://tools.cisco.com/squish/7B4d3

Go to networking/routing/static routing and there is your answer.

Kind regards,

Rate if helps!!

Julio

Re: Multiple subnets on SA520

gileswright01 — Fri, 06 Jan 2012 18:44:22 GMT

Thanks for getting back to me Julio. I'm not sure whether this helps or not. I'll try and explain the current setup a bit better:

(IP addresses have been changed)

WAN IP : 31.2.3.70

WAN SUBNET : 255.255.255.252

Gateway : 31.2.3.69

Primary LAN : 31.20.1.135

Primary LAN Subnet : 255.255.255.248

Secondary LAN : 78.92.47.165

Secondary LAN Subnet : 255.255.255.248

I can then configure servers on the network on the following ranges:

31.20.1.136 - 31.20.1.140

Gateway: 31.20.1.135

78.92.47.166 - 78.92.47.170

Gateway: 78.92.47.165

I can configure the new Cisco box with one of these ranges, but as it doesn't seem to have LAN Multi-homing, I don't seem to be able to add the 2nd subnet. Is this right? Is there another way of configuring it?

Thanks,

Giles

Re: Multiple subnets on SA520

Julio Carvajal — Fri, 06 Jan 2012 22:30:54 GMT

Hello,

What about configuring vlans and then enabling the Inter-vlan routing on each vlan?

Julio

Re: Multiple subnets on SA520

gileswright01 — Sat, 07 Jan 2012 08:45:38 GMT

Hi - yes, I'd tried that. For example I'd created 2 extra VLANS, so there were VLANS on the following subnets:

192.168.75.1

192.168.2.1

192.168.3.1

I turned DHCP off on all of them. When I was connected to the default 192.168.75.1 VLAN I was able to ping all of the other subnets, ie 192.168.75.1, 192.168.2.1 and 192.168.3.1. When I tried to configure my machine to use one of the other subnets this didn't work.

So if I set up my machine with an ip address of 192.168.2.100 / netmask 255.255.255.0 with a gateway of 192.168.2.1, I wasn't able to ping anything.

Any thoughts?

Giles

Re: Multiple subnets on SA520

Julio Carvajal — Sat, 07 Jan 2012 19:47:48 GMT

Hello,

If you add the Inter-vlan routing option that should be it!