This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG LAN TO RED LAN

Sophos User4767 over 4 years ago

XG210 (SFOS 18.0.4 MR-4)

2 RED 60 Devices at remote sites

MAIN OFFICE: 192.168.0.0/16

RED2: 172.16.0.1/255.255.255.192 - Standard/Unified - Zone: LAN

RED1: 172.16.0.65/255.255.255.192 - Standard/Unified - Zone: LAN

RED Devices show up connected

Unable to access devices from MAIN OFFICE TO RED LANS

Firewall Rule: Source LAN, Any host Destination: LAN,Any host : Any Service

The RED sites were originally configured wrong with overlapping networks 192.168.17.0 & 192.168.18.0 I changed them to 172.16. network hoping it would correct issue.

I am seeing this in ARP - Incomplete - I disabled RED interfaces for minute to let them reboot. Should I reboot the XG as well ? Any ideas on where to look for problem.

Thanks

This thread was automatically locked due to age.

0 FormerMember over 4 years ago

Hi Sophos User4767,

Thank you for reaching out to the Community!

Did you configure any static or SD-WAN policy route for these red networks on your firewall? If yes, please post a screenshot.

Are you able to access local resources from remote sites? Is the DHCP server configured for the RED interfaces?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User4767 over 4 years ago in reply to FormerMember

Nothing is setup under Static Routing or SD-WAN policy Route - should there be ?

Yes DHCP is setup
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User4767 over 4 years ago in reply to Sophos User4767

Also noted this showing old IP on one and NA on other
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 4 years ago in reply to Sophos User4767
Hi Sophos User4767,

Try to add a static route for the red network and, if possible, delete and re-configure REDs on the firewall with the new network.

Sophos XG Firewall: How to configure a floating static unicast route

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel