This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG125 18.0.3 VLAN to WAN rule

ADM Fredrik Cherin over 4 years ago

Hi all. I am very new to Sophos XG 125. I need to have atleast 3 VLAN on my network and they need to access internet.

I created the VLAN and assigned a subnet to it

I added the VLAN to br0

I need the VLAN to access to internet, but i cant get the Firewall rule and NAT correct.

I can access the internet with default vlan, its the one i created i need to get access.

My switches do have the VLAN in its config and i also got the vlan tagged on my wifi controller. So i just need my XG to work.

Hope someone can help me on this one.

This thread was automatically locked due to age.

0 emmosophos over 4 years ago

Hello ADM,

Thank you for contacting the Sophos Community!

Can you share a screenshot of your Bridge Configuration and Firewall Rule configuration?

Are the Vlans part of the LAN zone?

Do you have the Default SNAT IPv4 NAT rule?

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 ADM Fredrik Cherin over 4 years ago in reply to emmosophos

Hi VLAN2 and VLAN20 are members of LAN

Yes, i do have the Default SNAT IPv4 NAT Rule

I´ve added the 2 vlans on vlanfilter and also tested without them (further down last screenshot)

Grateful for help
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 4 years ago in reply to ADM Fredrik Cherin
Hi ADM Fredrik Cherin,

Thank you for the screenshots.

Can you provide the screenshot of the associated SNAT rule for the default firewall rule?

Did you configure the original source as "Any" with the SNAT rule and static route for the VLAN?

I would suggest you run a packet capture on the source IP address while accessing the internet.

Monitor traffic using Packet Capture Utility in the Sophos XG Firewall GUI

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 ADM Fredrik Cherin over 4 years ago in reply to FormerMember

Hi. there are no associated SNAT rule in firewall rules. I have not made any rules myself, they are all standard with the installation.

I can connect to wifi and get my valn2 and 20 subnet, but it won´t let me use internet.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to ADM Fredrik Cherin

Delete the Linked NAT rule and retry.
Cancel
Vote Up 0 Vote Down

Cancel
0 ADM Fredrik Cherin over 4 years ago in reply to LuCar Toni

any of theese?
Cancel
Vote Up 0 Vote Down

Cancel
0 nidi over 4 years ago in reply to ADM Fredrik Cherin

hi. could you fix the issue? (i got the same problem)
if yes, how?
Cancel
Vote Up 0 Vote Down

Cancel