This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help Configuring IP Routed Subnet

Hello,

I am currently placing a Draytek vigor router with a Sophos XG firewall and on the Draytek we have an IP configured as a IP Routed Subnet, basically there is NO Lan IP on the device it is just a designed WAN IP from our ISP.

We are allocated 3 x IPS. x.x.x.213 x.x.x.214 x.x.x.215

x.x.x.213 is our Main WAN ip and x.x.x.214 is the IP Routed Subnet.

Any one have any idea how to configure this on XG's?

Cheers

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 6 years ago

Hi,

what do you use the routed sub-net for? You could try using an alias on the WAN interface.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Aidan Preston over 6 years ago in reply to rfcat_vk

Hi it serves our remote software appliance from Bomgar.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to Aidan Preston

Hi,

what you are saying is you require external access to an internal server using its own external IP address? which is different to your advertised firewall address?

A quick sketch would help clarify your requirements.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Aidan Preston over 6 years ago in reply to rfcat_vk

Yes exactly we are allocated 3 x IP's. Let's say x.x.x.3 x.x.x.4 x.x.x..4

x.x.x.3 is our main WAN IP over PPPoE and x.x.x.4 is designated to our remote software box.

x.x.x.3 will serve our LAN and I would like x.x.x.4 to be bound straight onto the remote software box.

Right now we use a Draytek Vigor which let's us do this with the IP Routed Subnet functionality.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to Aidan Preston

Hi,

you would need to use a business rule to provide external access to your server. The XG provides a greater firewall network security than the Vigor that is why I assume you migrated to the XG.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Aidan Preston over 6 years ago in reply to rfcat_vk

HI Absolutely yes,

So in terms of 'Network' config - Would the external facing server be placed as an Alias on the WAN IP?

Aidan
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to Aidan Preston

Hi Aidan,

I suspect you will need to rethink your network a little.

I am guessing a little here. The business rule would not use a NAT.

I will eave any further discussion to a more experienced mod/forum member.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 6 years ago in reply to Aidan Preston

Hi Aidan,

I suspect you will need to rethink your network a little.

I am guessing a little here. The business rule would not use a NAT.

I will eave any further discussion to a more experienced mod/forum member.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data