This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LAN to LAN Policy in Sophos XG

Hi to all Sophos Experts!

I would like to ask assistance. Currently we are using Sophos XG310. I would like to ask how to create a policy to allow my local networks to see each other and connect to local services like shared folder. Below is my setup.

WAN1 - PORT2
WAN2 - PORT4
WAN3 - PORT6
WAN4 - PORT8

VLAN10 - PORT1
VLAN20 - PORT3
VLAN30 - PORT5
VLAN40 - PORT7

I would like all my VLANs to communicate with one another and share folders. My server are located in VLAN10. I also want client PC in VLAN20 and VLAN30 to communicate with the server. Can anyone shed some ideas.

Thanks in advance guys!

This thread was automatically locked due to age.

0 Badrobot over 5 years ago

You need to create Zones for each interface and then create a firewall rule so they can communicate with each other.

Think of it this way, it is no different than creating a rule to let a lan talk to the wan or vice versa.

https://community.sophos.com/kb/en-us/126185

https://news.sophos.com/en-us/2016/03/24/how-to-create-zones-assign-interfaces-and-add-network-policies-on-your-xg-firewall/
Cancel
Vote Up 0 Vote Down

Cancel
0 Rodney Altamera over 5 years ago in reply to Badrobot

Hi Badrobot,

Thanks for the fast response. Yes I'll check this out. One more question. No need to create a bridge for all vlans?

Thanks.

rodneyaltam
Cancel
Vote Up 0 Vote Down

Cancel
0 jprusch over 5 years ago in reply to Rodney Altamera

Hello Rodney,

short answer: NO!
Cancel
Vote Up 0 Vote Down

Cancel
0 Rodney Altamera over 5 years ago in reply to jprusch

Hi jprusch ,

Thanks for the immediate and short response!

Thanks

rodneyaltam
Cancel
Vote Up 0 Vote Down

Cancel