This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LAN hosts can't get outbound

Working with a new Sophos XG setup and I'm almost certain this is a noobie mistake. My lan interface cannot get outbound to the internet. I can ping my inside gateway and the outside IP of the Sophos, but no further.

I have configured a rule to allow the LAN outbound as well as a NAT rule.

Any ideas? I will attach screenshots of config when I get home.

This thread was automatically locked due to age.

Parents

0 lferrara over 7 years ago

Stetson,

in addition to the screenshot, please tell us if you are using XG as bridge or routing mode.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Stetson Blake over 7 years ago in reply to lferrara

I believe routed mode. How might I tell?
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to Stetson Blake

Stetson,

please share firewall screenshots.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Stetson Blake over 7 years ago in reply to lferrara

Sorry for the delay, here are what I think are the relevant sections.

I have the upstream gateway defined, but no default route outbound, do I need this?
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to Stetson Blake

Stetson,

thanks for the screenshot. Are you using an Appliance?

No traffic on firewall rule. Are your users using XG as default gateway?
Cancel
Vote Up 0 Vote Down

Cancel
0 Stetson Blake over 7 years ago in reply to lferrara

We have this running on ESXi. The clients have the XG as their default gateway and are successfully receiving IP's and can ping the gateway as well as the outside IP, but nothing further.
This leads me to believe maybe it's a routing issue.

Is there a way to get lower level debug/log messages from the XG?
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to Stetson Blake

On VMware,

do you have 2 separate vSwitchs? One for XG lan and one for WAN? So 2 separate NICs are needed.
Cancel
Vote Up 0 Vote Down

Cancel
0 Stetson Blake over 7 years ago in reply to lferrara

Yep. That's exactly how it is laid out.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Stetson Blake over 7 years ago in reply to lferrara

Yep. That's exactly how it is laid out.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data