the subject says it (sort of)
the setup for my network is a simple one.
i am using the rb250g switch to be the main source for the internet.
so
internet → rb250g switch → firewall tmg switch → domain → users.
even if i log into the firewall tmg machine i cant ping the rb250g switch! it has an ip which is on the same subnet. i have a 192.168.5.0/24 subnet and the rb250g has a 192.168.5.81 ip.
if i connect directly to it then i can get to it.
what am i missing?
Do you use the same subnet on both sides of the firewall.
Change to a different subnet on rb250 and assign one extra address to the firewall on the wan side.
i was thinking about that… changing the ip on the rb250 however to what? the rb250 is on the external interface for the TMG box.
what do you mean “assign one extra address to the firewall on the wan side”?
if you mean add another ip address on the external (NET) interface then that would create a problem because the internal (LAN) interface is already 192.168.5.0/24 … it makes no sense to add an ip to the external (NET) interface…
i did try it and it did work from the TMG box but its a mess now. i really dont want to add another ip to the external (NET) interface.
Assign f.ex 192.168.6.0/24 as the extra network on the wan side, change the rb250 to 192.168.6.0/24 network.
But yes, it does not make any sense to have the 192.168.5.0/24 on both sides of of the firewall. You either have to change the the network on the wan or lan side, or make another solution with vlan tagged management network. It also depends if your fw is able to add another ip address on the wan side.
sorry but that did not work.
at first i gave the rb250g an ip of 192.168.6.81 then the moment i assigned my ext adaptor another ip of 192.168.6.235 i got a message i had an ip conflict … whats ironic is it had the same mac address as the internet gateway. no matter what ip i put in it always said i had a conflict with the gateway.
furthermore arp -a didnt show any conflicts.