Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 27 subscribers
  • Views 4235 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can someone help me bridge this the way we need it?

Greg Rogers

We are moving from a PFSense to a XG210. I need help getting our phone system connected properly. The way we have it in the PFSense is WAN and Interface4 are bridged together. We have 10 public ip addresses. WAN uses an IP address, the bridge does not require using an IP of any kind. The PBX uses one of the public ip addresses and acts like a standard router. The PBX is connected on Interface4. We are using an AllWorx PBX. From my understanding this PBX will not work 100% if any filtering is in place and the pbx must be on the edge of the network. Which is why I made the PFSense as transparent as possible for this PBX. We wanted to keep it like this so that we could see the amount of data being used.

 

 

If this isn't possible, I may just hook it up directly to the fiber interface TWC gave us and give it a dedicated port. 



This thread was automatically locked due to age.
Parents
  • 0

    1. Unbind your already configured WAN interface (set the zone to None).

    2. Create a custom zone called 'PBX' of type DMZ.

    3. In Network -> Interface click on Add Interface and select Bridge.

    4. In members, select one port as WAN zone and second port as PBX zone.

    5. Assign your Public IP (Firewall's Public IP) for this bridge pair and also configure appropriate Gateway IP.

    6. Connect ISP line to WAN port, connect PBX switch to PBX zone port.

    7. Configure a different usable Public IP on PBX and configure Gateway as ISP Device IP (NOT XG Firewall IP).

    8. Create a WAN -> PBX and PBX -> WAN rule with NAT disabled.

    9. Rest of the policies can be configured as normal (LAN -> WAN, LAN -> DMZ etc.).

     

    If that does not work or affects something else, there is an alternate way to do it (old method, a little complicated):

     

    https://community.sophos.com/kb/en-us/123525

Reply
  • 0

    1. Unbind your already configured WAN interface (set the zone to None).

    2. Create a custom zone called 'PBX' of type DMZ.

    3. In Network -> Interface click on Add Interface and select Bridge.

    4. In members, select one port as WAN zone and second port as PBX zone.

    5. Assign your Public IP (Firewall's Public IP) for this bridge pair and also configure appropriate Gateway IP.

    6. Connect ISP line to WAN port, connect PBX switch to PBX zone port.

    7. Configure a different usable Public IP on PBX and configure Gateway as ISP Device IP (NOT XG Firewall IP).

    8. Create a WAN -> PBX and PBX -> WAN rule with NAT disabled.

    9. Rest of the policies can be configured as normal (LAN -> WAN, LAN -> DMZ etc.).

     

    If that does not work or affects something else, there is an alternate way to do it (old method, a little complicated):

     

    https://community.sophos.com/kb/en-us/123525

Children
No Data