I'm using a Procurve 5406zl (J8697A) layer 3 switch with multiple vlans:


  • v10 Main Network
  • v12 Wireless
  • v13 Restricted Wireless
  • v14 Tech
  • v50 Internet

And Untangle with 3 nics:

  • External (Uverse)
  • Internal (LAN)
  • Primary IP: /24

IP Aliases:

  • /22
  • /22
  • /22
  • /24
  • /20

  • DMZ (DSL Connection, this connection we're doing away with)

  • eth3 (New fiber connection)

And Static Routes:

  • Target: - Gateway:
  • Target: Gateway:
  • Target: - Gateway:
  • Target: - Gateway:

Changes I'm looking to make:

I'd like to start utilizing the new fiber connection added to eth3 interface.

I'd like to have all of the VLANs to start using the eth3 it except for VLAN 13 which is our public wifi id like for it to continue to use the "External" interface.

What do I need to do in order to start utilizing this new connection on eth3?

  • 4
    I'd invest into a L3 switch which supports VRF, your use case is exact fit for VRF.
    – ytti
    Aug 23, 2013 at 9:02
  • You should put more details on the following: 1. What is the external IP of your Untangle box's external interface and how is it connected to the DSL? (I dont need your public IP but the way it is configred) 2. What is the setup of the eth3 interface? is it layer 2 interface or layer 3? 3. Please share your static route configuration as what you have described is not clear. 4. How much down-time can you afford to do this migration?
    – AdnanG
    Oct 22, 2013 at 8:48
  • 5. Do you have any other services running on the network? 6. Can you change IP addresses of your subnets and user machines? 7. Is there any reason to choose the /22 sbnet for your user VLANs? 8. Do you have any server VLAN in your network? What servers do you have? I am assuming you still need both your users and public wifi to use the Untangle box. Is this correct? I tried drawing your current setup and the above questions popped up in my head. It will help if you draw your setup and attach it here. (Please dont include public IPs or other revealing info about your setup).
    – AdnanG
    Oct 22, 2013 at 8:49
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could post and accept your own answer.
    – Ron Maupin
    Jan 5, 2021 at 19:36

1 Answer 1


This will require a "policy-based routing"-esque configuration, since you'll essentially be routing based on source address/subnet.

This should be possible with WAN balancer if memory serves, but it's been a while so I recommend looking at it's requirements first. (i.e. requires separate cards for each WAN connection)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.