Static Routes Vs Summarization

I cannot follow your question. Routing is explained here: docs.sophos.com/.../RoutingStaticRoute.html

Hi,

By below details you should be clear as to what I want to achieve. I have various VLANS and for that I had to add all the VLANs in static routing. Can I aggregate / summarize all the routes mentioned in static routing.?

Are those VLANs attached on the firewall? Direct attached networks do not need static routes.

You can use 172.16.0.0/16 

No, On the Parameter I have Sophos XG which is connected to HP L3 where I have configured all VLANs. Since the VLANs are configured on L3 I was advised by one of the Sophos engineer to configure Static Routing. Now I want to summarize those routes. ?

You have one interface on the XG terminating the the traffic, so /16 advised /16 will do the job.

Assumption being you do not have any vlans terminating on the XG. You have setup routing in your switches so there is nothing to be done on the XG, it will see the /16 traffic.

ian

Hi,

When I am summarizing the static routes in summarize calculator online , it gives 172.16.0.0/21, is it OK ?

The routes entered are

172.16.1.0/25
172.16.2.0/24
172.16.3.0/26
172.16.4.0/26
172.16.5.0/26
172.16.6.0/26
172.16.7.0/26
172.16.8.0/26

Also where needs to be the route summarization to be configured, under Static Routing or somewhere else ? Please advise

Hi,

what address will you be using on the XG that is where you will use the /21?

How do you assign and manage the address assignments on your VLAN?
Ian

Yes, that I am not aware. I wanted that instead of list of static routes if I summarize them then it would be fine, but as far as your questions are concerned, I am not aware. Can you guide ?

Use /16 that includes all needed IPs. 

Use /16 that includes all needed IPs. 

where needs to be the route summarization to be configured, under Static Routing or somewhere else ? Please advise

Static routing. Simply delete all routes and place a /16. 

You do not need static routing on the XG because all your ip ranges are presented to the XG as one network on one port, not split. Your switch will do all the routing and send the unknown traffic to the XG as the internet gateway.
ian

He needs static routes because the hpe switch doesn't know any routes back. Simply place a summary route in static routes (as already described).

A static route pointing at what? He only has one interface to the HPe switch where all the IP addresses are sent over. There is nowhere to route the traffic back. If he terminated the VLANs on the XG, then he would need static routes, but the VLANs all termination the HPe switch present an aggregated address range the XG.

Ian

At least he need a transfer vlan to route all the traffic.. in this vlan/network the sophos and the hpe core needs a ip address. And with this the traffic will be routed forward and backwards.