MPLS Connectivity Issues after switch from UTM to XG 18.5

Question

Hi all, 
 
 We recently switched from a UTM software install to a pair of XG3100s running in HA active/passive. 
 Since the switch over we have had an issue with clients at our branch offices communicating with servers and devices on our LAN. 
 Network Diagram and Ping results 
 
 The ping from our main office looks to fail out on the MPLS network, and we have raised a call with our MPLS provider, to which they came back with to issues on the MPLS side. 
 The ping from a client at a branch office back to main office fails at the MPLS port on the XG. 
 Strangely I can VNC to clients at the branch offices on LAN or via SSL VPN. 
 The clients at the remote offices are unable to see servers in the 172.16.5.0/24 range and can't get DNS from on prem DC, printer server, etc. 
 
 I have spent a week on the phone with Sophos support and the agents say they need to raise it with there senior techs but I never get a call back. 
 
 Any help gratefully received. 
 
 Thanks.

LuCar Toni · Answer

You should look into the routing concepts of SFOS. 
 I wrote some concepts about this: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/121408/routing-in-xgv18-with-sd-wan-pbr

LuCar Toni · Answer

It certainly is. Try this one: community.sophos.com/.../xml-import-for-sfos-default-objects

sys8dmin · Answer

Hi All, 
 
 the fix for this issue was to add the local subnets as a bypass rule on the XG: 
 
 set advanced-firewall bypass-stateful-firewall-config add source_network 172.16.0.0 source_netmask 255.255.0.0 dest_network 192.168.18.0 dest_netmask 255.255.255.0 set advanced-firewall bypass-stateful-firewall-config add source_network 192.168.18.0 source_netmask 255.255.255.0 dest_network 172.16.0.0 dest_netmask 255.255.0.0 
 To remove the table entries just replace the &ldquo;add&rdquo; with &ldquo;del&rdquo; 
 To list the table please use&hellip; show advanced-firewall 
 
 Thanks.

MPLS Connectivity Issues after switch from UTM to XG 18.5

Top Replies