Sonicwall Multi-Homed Servers for VPN

If you are a Managed Service Provider,you will inevitably have a customer whose IP subnet is the same as another customer. I have multiple customers on network which is because Linksys defaults to this; however I just can’t change those networks subnet without hassle and downtime. For this demonstration we will be using Sonicwall.

This is how I typically deal with this:

Pick a new subnet that you wish those machines to be on. In this example I have picked and I always maintain the last octet for some consistency, so would become Then the next step is to add the IP.

Sonicwall subnet IP routing

Next run ipconfig /all to obtain your mac address.

ipconfig subnet

Add the static ARP entry for that ip address and mac address. This is done on the Sonicwall.

sonicwall add static arp entry

You will also need to ‘Publish’ ARP entry on the Sonicwall which is #9.

You will then need to set the static route to the proper interface.

sonicwall static route interface

You then setup the static VPN like you normally would but use

sonicwall setup vpn

You then have the ability to connect to those servers and do what you need to over the VPN, including pivot from those servers to any other workstation not set up.

In conclusion, I now have direct access to this customer without the need to dial up a VPN from my workstation and I don’t lose access to the other customers during that period. Furthermore my network monitor (Netmon 6.2) at my site which monitors all my customers can now monitor those servers as well. All this was done with 0 downtime and is quite easy to set up.

Try our Netmon 6.2 Demo!

Take a live test drive of our Netmon 6.2 network monitoring solution inside our HQ network with live traffic and operational devices.


Once you register you will be sent an email with further details and login information.

Your Name: (required)

Company Name: (required)

Email: (required)

*By registering above, you agree to be contacted to receive details for the demo login and future communications, unless otherwise opting out.