Sophos XG RED through specific gateway

You may switch the server / client role and configure the needed interface from the "other side".

Thx for the reply Sadly that isnt a possibility. We can not change the config on the Firewall in the Datacenter. 

Hello,

Greeting from Sophos!

At the client end, you have an option to specify on which IP address would you like to establish the red tunnel. I think that would do in your case!

Currently, we don't have option to set backup gateway. However, you may create A records for all your ISP IP's and use FQDN in client end. Hence based on the domain resolution weight. It will try connecting it! 

Regards,

Mayur Makvana

Thank you for your reply. Which IP setting do you mean?

In my understanding The "Firewall IP/hostname" is the datacenter and The RED IP is for the transfer-network which is established over the tunnel.

Hello,

At client end, you can specify the IP of server side on which you wants to make a connection to.

Below snap shot is from the client end, wherein you may add one from the following:

Port 1 gateway to fibre internet
Port 2 Gateway to VDSL
Port 3 Gateway to LTE

Happy to help!

Regards,

Mayur Makvana

I think i have done a poor job on discribing... So here i channel my inner Davinci:

We are the XG (which is the "client") on the left and have no possebility to config the datacenter (which is the "server") on the right.

The XG connect to the puplic ip of the datacenter on the right.

We try to enstablish the Connection always over GW1 on our (the left) side.

The following edited screenshot is from our XG (on the left)

imho i can only enter the ip or DNS name of the Datacenter in the "Firewall IP/hostname" field.

Maybe you thought that the XG would do the "server-job", but that is not the case.

Hello,

Thank you for sharing more insight on setup!

Add static route for Datacenter public IP in your XG135 via any of below gateway and choose interface as well in that static route:

Port 1 gateway to fibre internet
Port 2 Gateway to VDSL
Port 3 Gateway to LTE

I have tested in lab and it worked for me! Below is the route precedence setting in my lab.

console> system route_precedence show
Routing Precedence:
1. Static routes
2. VPN routes
3. SD-WAN policy routes

Hope this would help!

Regards,

Mayur Makvana

THX, that did the trick.