Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 7 replies
  • Answers 1 answer
  • Subscribers 29 subscribers
  • Views 1018 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Setting up VLAN for ISP connection

shred

I switched to an ISP that requires VLAN tagging the WAN connection which I've done by adding a VLAN interface for the ethernet port the connection to the ISP is with the appropriate VLAN tag. Everything works as expected. However, on the physical interfaces page I now have the WAN interface that's configured for IPv4, so it shows up in the WAN link manager as being down. If I try to disable the IPv4 configuration and save it, I get the message "You must configure at least one IP family". I thought may I can set the Network zone to "None" but that gives the dialog to "Unbind interface" which is not what I want to do.

Is there any way to set this up so that physical interface isn't setup for IPv4 thus showing up as a gateway?



This thread was automatically locked due to age.
Parents
  • 0

    Just updated to 18.5.1 MR-1. Was hoping maybe there was a fix for this but still doesn't seem to be a way to enable a port/create a physical interface without an IPv4 or IPv6 configuration.

  • +1 in reply to shred

    Hi : On the Physical Interface select zone as in LAN - with any fake LAN which is not getting conflict with any existing network of XG ( so it will not reflect in WAN link manager). Later on add VLAN over this Physical LAN Interface and for that VLAN section select zone as in WAN with required VLAN tag and that will only show that VLAN interface inside the WAN Link manager. I hope this will help you to achieve your requirement posted in the thread.

    Here in the below snapshot, I have chosen an interface for reference from my setup, a similar tweak you may apply on your actual interface where you wanted to achieve tihs. 

    Reference snapshot:



    Add VLAN on this LAN Port as per below ( where zone is now WAN for this VLAN Interface):

  • 0 in reply to Vishal_R

    Thanks Vishal - I've changed my physical interface from the WAN to LAN zone and that has removed it from showing up in the WAN link manager. However, the "Interfaces" section under the main "Control center" page is still showing up as orange (e.g. degraded) but when I click it, it shows only two Gateways, my VLAN ISP and backup ISP, both of which show a green status. Perhaps this is a bug or am I missing something?

  • 0 in reply to shred

    Hi : Unfortunately Interface may show orange as the main interface on which WAN with VLAN is configured that LAN (main interface) is still have status unplugged. As of now no direct way to add VLAN on WAN Interface. Either you may raise FR for the same or you may upvote below FR thread which may full fill your last comment requirement.

    https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/43821441-request-to-hide-dummy-interface-on-wan-link-manage

  • 0 in reply to Vishal_R

    Thanks Vishal, I voted for that request. The strange part is it’s not showing the physical interface with a status of unplugged, it definitely indicates something is plugged in. It seems to me there’s some underlying bug that shows the overall interface status as orange when all gateways are in fact green - that seems pretty clear to me. However, I think perhaps the real issue is there’s no way to setup a physical interface without an IPv4 or IPv6 configuration, especially when there’s a VLAN on that physical interface with an IPv4 or IPv6 configuration. Anyways, appreciate the help and hope it gets fixed in a future update.

Reply
  • 0 in reply to Vishal_R

    Thanks Vishal, I voted for that request. The strange part is it’s not showing the physical interface with a status of unplugged, it definitely indicates something is plugged in. It seems to me there’s some underlying bug that shows the overall interface status as orange when all gateways are in fact green - that seems pretty clear to me. However, I think perhaps the real issue is there’s no way to setup a physical interface without an IPv4 or IPv6 configuration, especially when there’s a VLAN on that physical interface with an IPv4 or IPv6 configuration. Anyways, appreciate the help and hope it gets fixed in a future update.

Children
No Data