Route WAN traffic through RED tunnel possible?

Hello Eirik,

Thank you for contacting the Sophos Community!

If you use a RED tunnel this won’t work, however, if you configure an IPSec tunnel this should be possible to achieve.

Regards,

Thanks emmosophos.

Do you have an "how-to" on how to setup the ipsec routing/gateway to accomplish this setup? The IPsec is probably the easiest part..?

Hi Eirik Jolle,

Check out the following KBA for info: Sophos XG Firewall: How to set a Site-to-Site IPsec VPN connection using a preshared key

On BO, add the VLAN50 as local network and Any in the remote network.
On HO, add Any in the local network and VLAN50 in a remote network, Configure VPN rules as per the KBA on both firewalls but add additional rule VPN to WAN on the HQ firewall.

Thanks,

What a shame this is not possible with RED. I was looking into exactly the same issue.

Would it be possible if I'd have the same VLANs on both side? 

Actually thats possible, but not recommended. 

VLAN can only travel across networks, if you use a Bridge. You can bridge a RED Site to Site Tunnel all together with a ON-Prem Interface (Port1). This would give you the possibility to route a VLAN.

BUT: why would you do this? Why should the other end actually use this VLAN? For the other end, the VLAN is not important. Only the Layer 3 subnet is important to make routing decisions. So you do not need to forward the VLAN.