This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help me with static routing.

I'll try to explain this as easy as possible.

I have two internet connections with 5 static ips on each connection. I have a Cisco router (A: 10.0.1.1) and Sophos XG 135 (B: 192.168.10.1). Both routers have a public IP to each internet connection. Both routers are connected to the same switch.

I need to setup a static route between A and B.

How would I go about this in the Sophos?

 

I'm guessing I'd go to configure -> routing -> static routing and add a ipv4 unicast route with the dest of 10.0.1.0/24 and gateway of 192.168.10.2 with a distance of 1?

Is there anything else I need to do after that to be able to talk to devices at 10.0.1.0/24 from 192.168.10.0/24?



This thread was automatically locked due to age.
  • Hi Greg,

    a simpler approach would be to put both external connections on the XG.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • The cisco has a VPN connection to servers with another company. The cisco also has 2 other subnets we will need to communicate with. So your solution makes no sense.

     

     

    Also doesn't "Both routers have a public IP to each internet connection" do the same as to what you said?

  • Sounds like easy routing? 

    But: Can you print some kind of network map? 

    Are both connected to the same switch, so you could easily build up a gateway route. You would have to do it on both appliances and it should work fine. 

    __________________________________________________________________________________________________________________

  • I'd have to draw it out.

    But yes both routers are directly attached to the same 48 port switch.

    Would I need to add some kind of lan to lan firewall rules as well?

  • The point is: The Network you try to reach is behind which zone? 

    A Zone is defined by the Interface which XG is using to reach this network.

     

    For example. 1.2.3.4 would be Zone WAN because you need to reach your ISP.

    192.168.10.1 could be behind zone LAN if you try to reach 192.168.1.1 as a gateway, in which case 192.168.1.2 is XG LAN interface. 

    So basically the rule have to match.

     

    You can use the policy tester. https://community.sophos.com/kb/en-us/127477

    __________________________________________________________________________________________________________________



  • This diagram is what I am trying to achieve. I need those computers to be able to talk to machines on the Cisco as well as the Sophos router. I want all their primary traffic to go out over the Sophos router. 

    I figured setting up a static route between the sophos router and cisco router is the best way to do this.

     

     

    Right now I have two sophos XG's setup in this configuration for lab testing purposes. How would I do this with 2 XG's?

  • But: All Clients seems to be in one broadcast Domain? So what should XG / Cisco do here? 

    But looks like Asynchron Routing.

    https://networkguy.de/?p=409

     

    Default Gateway is XG. But XG needs to send something to Cisco. 

    __________________________________________________________________________________________________________________