We have a main office (M) with a Sonicwall TZ215, and a branch office (B) with a TZ210.
Computers in B access the server in M through a site-to-site VPN between the two Sonicwalls. Internet traffic from B goes straight out of the local router, but traffic from B (192.168.1.x) to the main office is NATted to the local network in M (192.168.0.x).
We have third party VOIP phones in M on their own subnet.
I would like to have a VOIP phone from the system in M in the branch office B, but to make it work, traffic from the VOIP phone n B must be routed to M and then routed the VOIP subnet, as the third party VOIP system (apparently) needs the traffic to transit through the router in M (probably some combination of specific public IP and private DNS).
Here is a very crude diagram of the setup.
M ISP ISP B |------------------------- VPN---------------| | router |--------| |router|-----| | | X1 | X1 |VOIP switch| |sonicwall| |sonicwall| | |--------|X3 X0 | |X0 X2 | | VOIP phones| | LAN | | LAN | | VOIP phone|
a) Can this be done with the Sonicwalls?
b) What strategy can I use?
I have tried connecting the VOIP phone to X2 and creating a separate subnet in B for the VOIP phone (10.0.0.x). I can add that subnet to the VPN, as in these instructions but I have not found a way to force ALL traffic from that subnet over the VPN, while not forcing ALL traffic from the local network (192.168.1.x) through the VPN (not desirable). The idea is that once through the VPN I should be able to direct all traffic out of the specific gateway on the Sonicwall in M on X3.
I tried creating a second site-to-site VPN in B, but it seems to conflict with the first, as they share the same endpoint in M (public IP), in a similar way as described here.
Any suggestions welcome!