ALLOW A FIREWALL CONNECTED BY LAN TO SOPHOS XG

Hi, 

are you asking about incoming traffic to the server or just putting?

The XG would be on an untagged port of the VLAN 13 of the switch. What IP address does the server present to the XG? The firewall rule would be similar to this

source LAN, network the network associated with VLAN 13, destination WAN, network ANY, services (HTTPS, DNS etc)m allow, log. To refine the rule you could create a clientless user for the server and us that name in the allow access in the firewall rule.

Ian

The server should have access to the internet as it belongs to our vendor and it needs to connect with their server. i did not check what the ip for the

server present to Xg

Also I would like to add firewall has been setup to NAT and also the 172.16.1.0 network is dhcp. from the server it can ping to vlan 13 with ip 10.10.13.1 but not the sophos xg. 

What is the address of the XG port? Have you allowed ping through the sonicwall? Is the XG connected to an untagged port on the switch, assuming the vlan is controlled by the sonicwall?

ian

our switch is the one controlling the vlan as it is multilayer switch. the address of the xg port is 192.171.101.49

Does the switch know the XG is your gateway?

Ian

Yes. all other vlans can access the network except that network setup for the above diagram.  

Can you ping the XG interface from the switch? What is the ip range of VLAN 13?

Ian

10.10.13.0/25. yes i can ping the xg from vlan 13. my question is how to make the 172.16.1.0/24 network to have internet access.

The issue is the XG port is not in the VLAN 13 IP address range.

Ian