This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LAN to LAN rule on sophos XG 210

Hello Team,

 

I have Sophos XG210 and MIkrotik CRS each doing NATing. They are connected from 2 different providers.

On Sophos:

WAN:ether3

LAN: ether5(192.168.88.0/24)

From this LAN port is going to manageable switch for Hotspot users.

 

 

On MikroTik CRS:

WAN: ether1

LAN: Bridge with ports ether2-ether10(192.168.1.0/24)

From mikrotik ether2 is going to another manageable switch for Office users+Exchange server.

Users from mikrotik can access very well exchange server from both inside and outside.But something is different from Sophos users. People who connect using mobile broadband can access exchange server which is port forwarded. Is there a way to create a LAN to LAN on sophos to allow users from it(192.168.88.0/24) to access Exchange server which is on different subnet?

 

Thanks.



This thread was automatically locked due to age.
Parents
  • Hi,

    assumption, they are on the XG networks?

    source LAN -> ANY destination  LAN -> ANY -> Allow ->log.

    If you wish to refine the rule change the ANY to the network of the source and destination networks. You will NOT need a NAT.

    If you require traffic in the the direction setup a rule with the reverse network addresses.

    Ian

     

    UPDATE:- being a lousy typist and spellchecker taking over - YOU WILL NOT NEED a NAT.

Reply
  • Hi,

    assumption, they are on the XG networks?

    source LAN -> ANY destination  LAN -> ANY -> Allow ->log.

    If you wish to refine the rule change the ANY to the network of the source and destination networks. You will NOT need a NAT.

    If you require traffic in the the direction setup a rule with the reverse network addresses.

    Ian

     

    UPDATE:- being a lousy typist and spellchecker taking over - YOU WILL NOT NEED a NAT.

Children