Sophos Firewall

Discussions Vlan Interface not working

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 3 replies
Subscribers 28 subscribers
Views 3464 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Vlan Interface not working

M Okasha over 6 years ago

hello guys

iam testing sophos XG in lab environment using GNS3

as you can see i have created a simple lab using one core switch

and configured it with 3 vlans : 100, 200, 300

the port e0/0 is configured as dot1q Trunk port

port e1/0 is a member of vlan 100

on my xg i have created vlan interface and tagged it with 100 and attached it to my lan port

then created a dhcp server for this vlan

but it seems not working properly

i cant get ip from the DHCP server

even when i set the ip statically i cant ping the vlan interface

then i captured trunk port packets (E0/0) with wireshark

i found that the dhcp server is offering the correct IP address but the PC doesn't replay with Request

any idea what am i missing here ?

thank you

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 6 years ago

Hi,

The XG is a layer 3 product while the UTM is a layer 2 product.

So you will need a layer 3 switch to setup your VLANs.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 M Okasha over 6 years ago in reply to rfcat_vk

hello

the XG is layer 3 product right

so it should be able to handle tagged traffic , right ?

thats why i created vlan interface

would u please explain more why the firewall cant handle tagged traffic via vlan interfaces
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to M Okasha

XG cannot handle VLAN Interrouting on a Bridge (layer2).

Layer 3 routing on a "standard" interface should be possible.

You should start looking at the Switch, is everything correct configured?

I mean, XG seems to send the correct response, therefore it should get to the client. If not, maybe something is broken between Client and XG.

Maybe start another dump on XG, just to verify, the correct VLAN interface is used.

https://community.sophos.com/products/community-chat/f/knowledge-base-article-suggestions/105811/how-to-tcpdump-on-xg?pi2147=2
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 6 years ago in reply to M Okasha

XG cannot handle VLAN Interrouting on a Bridge (layer2).

Layer 3 routing on a "standard" interface should be possible.

You should start looking at the Switch, is everything correct configured?

I mean, XG seems to send the correct response, therefore it should get to the client. If not, maybe something is broken between Client and XG.

Maybe start another dump on XG, just to verify, the correct VLAN interface is used.

https://community.sophos.com/products/community-chat/f/knowledge-base-article-suggestions/105811/how-to-tcpdump-on-xg?pi2147=2
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data