DELL Sonic Firewall and Cisco layer 3 switches

DELL Sonic Firewall and Cisco layer 3 switches Configuration

It is sometimes difficult for the Sonic firewall to communicate with TRUNK settings of Cisco Switches.

The switch has multiple VLANs configured and there will be a single cable connecting to the DELL Sonic  firewall.

 Firewall need to learn all the Subnets configured in the switch network.

Please configure port to the firewall on the switch side

Enable interface VLAN 1 in switch—VLAN 1 is default VLAN

 conf t

interface Vlan1

 ip address 192.168.1.6 255.255.255.0

exit

 

ip default-gateway  192.168.1.1  (ip of firewall interface)

ip route 0.0.0.0 0.0.0.0 192.168.1.1

SONIC  Firewall port Configuration

interface FastEthernet1/0/1

 description Uplink to SonicWall

 switchport access vlan 1

 switchport mode access

 spanning-tree portfast

end

                                                           SONIC FIREWALL SIDE

Assign an IP address to the inside interface like 192.168.1.1

Create static route – do not summarize the routes pointing all the internal subnets to the Cisco switch example 192.168.1.6

For example

ip route 10.20.2.0 255.255.255.0 192.168.1.6

ip route 10.30.2.0 255.255.255.0 192.168.1.6

ip route 10.40.2.0 255.255.255.0 192.168.1.6

 Firewall will start to communicate with Switch side subnets.