ALLOW A FIREWALL CONNECTED BY LAN TO SOPHOS XG

Hi, 

are you asking about incoming traffic to the server or just putting?

The XG would be on an untagged port of the VLAN 13 of the switch. What IP address does the server present to the XG? The firewall rule would be similar to this

source LAN, network the network associated with VLAN 13, destination WAN, network ANY, services (HTTPS, DNS etc)m allow, log. To refine the rule you could create a clientless user for the server and us that name in the allow access in the firewall rule.

Ian

Also I would like to add firewall has been setup to NAT and also the 172.16.1.0 network is dhcp. from the server it can ping to vlan 13 with ip 10.10.13.1 but not the sophos xg. 

What is the address of the XG port? Have you allowed ping through the sonicwall? Is the XG connected to an untagged port on the switch, assuming the vlan is controlled by the sonicwall?

ian

our switch is the one controlling the vlan as it is multilayer switch. the address of the xg port is 192.171.101.49

Does the switch know the XG is your gateway?

Ian

Yes. all other vlans can access the network except that network setup for the above diagram.  

Can you ping the XG interface from the switch? What is the ip range of VLAN 13?

Ian

10.10.13.0/25. yes i can ping the xg from vlan 13. my question is how to make the 172.16.1.0/24 network to have internet access.

The issue is the XG port is not in the VLAN 13 IP address range.

Ian

The issue is the XG port is not in the VLAN 13 IP address range.

Ian

i would like to add server 172.16.1.0/24 behind the sonicwall can ping the gateway of vlan 13 10.10.13.1 but cannot ping sophos xg port.

You keep saying that but you don't answer my question, what is the IP address of the XG interface and from what you have said in the past is it is not part of there VLAN13 IP address range. Until the XG interface is part of the VLAN 13 iP address range it will not see and pass any traffic from the server.

Ian