Nebula: Routing traffic via SFP port for LAN to LAN connection

Options
EliteITGuy
EliteITGuy Posts: 14 image  Freshman Member
First Comment Fifth Anniversary
in Security
I have 2 USG100 Flex which I need to connect via the SFP ports. Each USG is it's own Subnet. I can't seem to assign the SFP port to LAN Group 1 like on my other ethernet ports. I'm considering creating Lan Group 3 on each device and have one give DCHP to the other, but I need peering from devices LAN Group 1 on USGFlex100-1 to Lan Group 1 o nUSGFlex100-2 . Is there any good way to do this? VPN won't give me the speed and the buildings already have fiber line run between them? Any suggestions?

Accepted Solution

  • jasailafan
    jasailafan Posts: 193 image  Master Member
    5 Answers First Comment Friend Collector Sixth Anniversary
    Answer ✓
    After Lan Group 3 is created on each device and assign SFP port to Lan Group 3, add a new interface and set ip address for it. Then create a policy route on each device as follows.
    USGFlex100-1
    Destination: USGFlex100-2 lan
    Type: Intranet traffic
    Next-hop: USGFlex100-2 SFP interface ip

    USGFlex100-2
    Destination: USGFlex100-1 lan
    Type: Intranet traffic
    Next-hop: USGFlex100-1 SFP interface ip

All Replies

  • jasailafan
    jasailafan Posts: 193 image  Master Member
    5 Answers First Comment Friend Collector Sixth Anniversary
    Answer ✓
    After Lan Group 3 is created on each device and assign SFP port to Lan Group 3, add a new interface and set ip address for it. Then create a policy route on each device as follows.
    USGFlex100-1
    Destination: USGFlex100-2 lan
    Type: Intranet traffic
    Next-hop: USGFlex100-2 SFP interface ip

    USGFlex100-2
    Destination: USGFlex100-1 lan
    Type: Intranet traffic
    Next-hop: USGFlex100-1 SFP interface ip

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）