XG Home, transparent/bridge mode, I can't seem to get it to work.

Hello Poly,

Thank you for contacting the Sophos Community!

If you bridged LAN and WAN together in your two ports, then you will only see one IP after it becomes a bridge. 

I would recommend you to start and try to Console into the XG and do a TCPdump to see if you are seeing traffic arriving at the XG. 

Regards,

Hi emmo,

Thanks for your reply. Traffic is now passing through, I have made an any-any-allow rule, and I have bridged the two ports and joined them into the same group. But how do I access the GUI now? When I try the IP of the bridge, port 4444, it times out.

Hello Poly,

Thank you for the follow-up!

So after you created the Firewall rules you aren’t able to access the GUI anymore?

Can you console or SSH into the XG? and from the advanced shell do the following command:

tcpdump -eni any port 444

And then try to access the GUI, let me know if you see packets arriving at the XG in the IP address of the Bridge

Regards

Hello Poly,

Thank you for the follow-up!

So after you created the Firewall rules you aren’t able to access the GUI anymore?

Can you console or SSH into the XG? and from the advanced shell do the following command:

tcpdump -eni any port 444

And then try to access the GUI, let me know if you see packets arriving at the XG in the IP address of the Bridge

Regards

Hi emmo,

I see incoming packets. If I place a pc after the bridge I can't access the GUI from that PC, like so:

Internet <> XG <> PC

If I place a pc in front of the XG, with a switch, I do can access GUI from the PC, like:

Internet <> Switch <> XG

                         |

                       PC

Sorry for my crappy ASCII art ;)

So everything behind the XG seems to be blocked, even-though there is an any-any rule on the firewall.

- Both ports of the bridge are in the LAN zone. Does that make a difference, LAN zone or WAN zone?

- On the bridge interface, I haven't enabled 'Enable routing on this bridge pair', should I?

Thanks again.

Within the bridge, XG still keeps the Zone concept. Means that both ports have a relationship to LAN or WAN. Basically the standard setup does not allow access from the WAN port. Means, you cannot access it from there. 

Routing should be enabled, if you have different Subnets going across this bridge.