This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LAN to LAN Policy in Sophos XG

Hi to all Sophos Experts!

I would like to ask assistance. Currently we are using Sophos XG310. I would like to ask how to create a policy to allow my local networks to see each other and connect to local services like shared folder. Below is my setup.

WAN1 - PORT2
WAN2 - PORT4
WAN3 - PORT6
WAN4 - PORT8

VLAN10 - PORT1
VLAN20 - PORT3
VLAN30 - PORT5
VLAN40 - PORT7

I would like all my VLANs to communicate with one another and share folders. My server are located in VLAN10. I also want client PC in VLAN20 and VLAN30 to communicate with the server. Can anyone shed some ideas.

Thanks in advance guys!

This thread was automatically locked due to age.

Parents

0 Badrobot over 5 years ago

You need to create Zones for each interface and then create a firewall rule so they can communicate with each other.

Think of it this way, it is no different than creating a rule to let a lan talk to the wan or vice versa.

https://community.sophos.com/kb/en-us/126185

https://news.sophos.com/en-us/2016/03/24/how-to-create-zones-assign-interfaces-and-add-network-policies-on-your-xg-firewall/
Cancel
Vote Up 0 Vote Down

Cancel
0 Rodney Altamera over 5 years ago in reply to Badrobot

Hi Badrobot,

Thanks for the fast response. Yes I'll check this out. One more question. No need to create a bridge for all vlans?

Thanks.

rodneyaltam
Cancel
Vote Up 0 Vote Down

Cancel
0 jprusch over 5 years ago in reply to Rodney Altamera

Hello Rodney,

short answer: NO!
Cancel
Vote Up 0 Vote Down

Cancel
0 Rodney Altamera over 5 years ago in reply to jprusch

Hi jprusch ,

Thanks for the immediate and short response!

Thanks

rodneyaltam
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Rodney Altamera over 5 years ago in reply to jprusch

Hi jprusch ,

Thanks for the immediate and short response!

Thanks

rodneyaltam
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data