This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VLAN Comunication

Hi,

I am new to Sophos XG. I have a few VLANs setup. (Please see the attached picture)

I have VLAN 3 for servers and then VLAN 5 is Trusted Wireless. I want to be able to talk and use remote desktop between VLAN 5 and 3 for server maintenance.

Would you be able to advise me on what firewall rules I need to make for this to work?

I also have an Active Directory DNS server sitting on the 3 VLAN. When I currently connect to the Trusted wireless VLAN (5) I am unable to connect to the DNS server 10.128.8.2 which is sitting on the Servers VLAN (3)

Any help would be much appreciated.

Kind Regards,

Charlie.

This thread was automatically locked due to age.

Parents

0 FormerMember over 5 years ago

Hi Charlie Scarlett

Thank you for reaching out to the Community!

Please configure LAN to LAN rule with VLAN 3 and 5 networks in source and destination networks. Did you also configure static routes for VLANS to use the Port1 interface as a gateway?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 FormerMember over 5 years ago

Hi Charlie Scarlett

Thank you for reaching out to the Community!

Please configure LAN to LAN rule with VLAN 3 and 5 networks in source and destination networks. Did you also configure static routes for VLANS to use the Port1 interface as a gateway?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Charlie Scarlett over 5 years ago in reply to FormerMember

Hi,

Thanks i will give this a try tomorrow :)

No not to my knowledge. I could have done it unknowingly though? Where would i check this? In the routes tab?

Kind Regards,

Charlie
Cancel
Vote Up 0 Vote Down

Cancel
0 l0rdraiden over 5 years ago in reply to FormerMember

" Did you also configure static routes for VLANS to use the Port1 interface as a gateway? "

I dont have it like that and each vlan uses the first ip to reach sophos as a gateway

Is this really necesary?
Cancel
Vote Up 0 Vote Down

Cancel
0 Charlie Scarlett over 5 years ago in reply to FormerMember

@H Patel, Does this look correct?
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to Charlie Scarlett

Hi Charlie Scarlett

The firewall rule looks correct.

You only need to configure the static route on the XG if you did not configure it on your switch for the VLANs.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Charlie Scarlett over 5 years ago in reply to FormerMember

Hi,

Thanks for your help i really appreciate it.

What would i need to put here? Gateway of what VLAN?

Thanks :)
Cancel
Vote Up 0 Vote Down

Cancel
0 Charlie Scarlett over 5 years ago in reply to FormerMember

thats what one of the VLAN interface pages looks like for my setup btw.
Cancel
Vote Up 0 Vote Down

Cancel
0 l0rdraiden over 5 years ago in reply to FormerMember

I have my inter vlan conmunication like this, and it works, what is the difference of doing it like you propose?
Cancel
Vote Up 0 Vote Down

Cancel
0 Charlie Scarlett over 5 years ago in reply to l0rdraiden

Hi,

Have you got an email I could message you on by any chance?

Kind Regards,

Charlie
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to Charlie Scarlett

Hi Charlie Scarlett

In destination IP /Netmask you can add VLAN network and select interface as Port1.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 l0rdraiden over 5 years ago in reply to FormerMember

bad practice, dont you lose half of the purpose of having VLANs by doing that?

He only needs to open 2 ports (DNS, RDP) between VLANs not the entire network.
Cancel
Vote Up 0 Vote Down

Cancel