some useful commands that may not all be obvious to everyone
arp table cleaned up and sorted:
arp -v -n -a | grep -v incomplete | tr -d '?()' | sort -t . -k 1,1n -k 2,2n -k 3,3n -k 4,4n
listing Sophos Connect VPN clients:
swanctl --list-sas | grep -i 10.99. | grep -i domain.com | less
swanctl --list-conns
ipsec client route list and more:
ipsec statusall (community.sophos.com/.../133386)
realtime network utilization, traffic, and more:
atop
iftop (community.sophos.com/.../427936)
clear nat translations to resolve voip phone sip 408 after rerouting wan from tunnel back to internet:
XG210_WP03_SFOS 17.5.8 MR-8# conntrack -F
routing table:
ip route show table all (ideas.sophos.com/.../13310139-routing-table-show)
historical ethernet port physical activity:
cat /log/syslog.log | grep -i port | grep -i link
current ethernet port type, speeed, duplex:
ethtool Port2
fix wan interface dhcp stuck on private ip after changing config in isp modem gateway to allocate public ip:
verify udhcpc running in "ps" output
Release dhcp:
killall -SIGUSR2 udhcpc
Renew dhcp:
killall -SIGUSR1 udhcpc
additional step if necessary:
ifconfig Port# down
ifconfig Port# up
list dhcp?
cat /tmp/dhcpd.leases | less
list wifi wireless clients?
cat /var/tslog/wc_remote.log | less
initial setup from serial console (not tested on current sfos) - https://community.sophos.com/products/xg-firewall/f/initial-setup/91528/initial-setup-from-serial-console
This thread was automatically locked due to age.