Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Firewall & Wires Only Leased Line

Hi. 

Hoping someone may be able to help. 

We have just rolled out a number of Sophos XG Firewalls to our remote offices. All of these sites have been installed with new internet connectivity which in most cases is simple as they are FTTC circuits, for a handful of sites a "Wires Only" Leased Line service has been provisioned. Wires Only is new to me as I am used to a Cisco NTE being in situ. 

My questions in around the "Wires Only" part and how this translates to the XG Firewall. 

The connection details I have been provided with are: 

WAN Details:

 

These IP addresses should be setup on the WAN side to connect your device to the Gamma network.

 

WAN subnet mask:

 255.255.255.252

WAN IP range:

 152.232.154.136/30

Your CPE WAN IP:

 152.232.154.138

Your CPE Gateway IP:

 152.232.154.137

 

 

LAN Details:

 

These IP Addresses should be used on the LAN side to connect your LAN devices together. If any of these IPs are used on the WAN connection the service will not work. 

 

LAN Subnet Mask:  

255.255.255.248

LAN IP Range:  

81.210.46.144/29

LAN IP Gateway:

81.210.46.145

Available LAN IP address(es):  

81.210.46.146 - 81.210.46.150

The leased line is presented as an SFP connection from the ADVA box which I have connected into Port 9 on my XG135. I have entered the WAN details above to this interface and I can connect to the internet without any issues. The part I am confused with is the LAN part and I cannot figure out where to put these details. I need to use 2 of my allocated IPs as the XG135 is split between two facilities on the same site and I need to establish two VPN connections. I thought it might have something to so with Alias but I cannot seem to make it fit correctly. 

Any assistance would be greatly apprecaited. 

Many thanks, Daniel Hargrove



This thread was automatically locked due to age.