How can I configure secondary subnet on LAN interface for firewall management purpose?

This article explains how to configure a Secondary subnet on the LAN interface to manage the SonicWall appliance.

EXAMPLE: We are using the Network below  as a example for this article.

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

Procedure

• Create Address Objects for the secondary IP and subnet
• Create Static Route
• Create NAT Policy
• Create Access Rule

Creating Address Objects for the secondary IP and subnet on LAN X0 interface.

1. Login to the SonicWall management Interface.
2. Click  Object ,navigate to Match Objects | Addresses, click  Add, create the address objects shown below.
3. Click OK.
   
   

Creating a Static Route

1. Navigate to Policy | Rules and Policies | Routing Rules, click  Add.
2. Click OK.

Creating a NAT Policy

1. Navigate to Rules| NAT Policies, click  Add, create the following NAT entry.

Creating the LAN to LAN Access Rule

Navigate to Policy |Rule & Policies |Access rule select Matrix and then click LAN-LAN arrow.

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

Procedure

• Create Address Objects for the secondary IP and subnet
• Create Static Route
• Create NAT Policy
• Create Access Rule

Creating Address Objects for the secondary IP and subnet on LAN X0 interface.

1. Login to the SonicWall management Interface.
2. Click  MANAGE ,navigate to Objects | Address Objects, click  Add, create the address objects shown below.
3. Click OK.
   

Creating a Static Route

1. Navigate to Network | Routing, click  Add.
2. Click OK.
   
   
   

Creating a NAT Policy

1. Navigate to Rules| NAT Policies, click  Add, create the following NAT entry.
   
   
   

Creating the LAN to LAN Access Rule

1. Navigate to Rules | Access Rules, select Matrix and then click LAN-LAN arrow.
2. 
   
   

   NOTE:  Option Enable Management should be checked in the access rules.

See also:

How to configure secondary IP address on WAN interface for firewall management purpose