2x Sophos XG RED Tunnel site2site non split mode doesnt work

Question

Hi, 
 I configured a RED tunnel between two XGs according to instructions from Sophos. 
 1.RED tunnel configured 
 2.LAN2LAN rule created. 
 3.Routing between LANs set up via RED tunnel. 
 RED TUNEL is active and work fine 
 But 
 I have the problem that the client side only reaches the LAN network from the server side. 
 According to the instructions, you have to set a static route between the LANs. 
 The question is how does the client side get into the internet to WAN? 
 Split mode should not run. All traffic (from the Branch office) should run over the RED tunnel. 
 BR

Jack Thompson · Answer

There is no user interface on the RED appliance. It is designed to be fully configured and managed from a Sophos Firewall. RED devices can be shipped to a remote site, connected to any DHCP connection to the internet, and be fully configured by a remote administrator with no prior knowledge of the site, and no need to walk local personnel through technical setup steps. 
 MyLabCorp Employee Login

LuCar Toni · Answer

There are multiple approaches to do this. 
 Static Route (0.0.0.0) on the BO Firewall. 
 SD-WAN Policy based Route 
 Setting up the RED as a WAN Interface. 
 
 All those approaches require a RED to WAN Rule on the HQ.

2x Sophos XG RED Tunnel site2site non split mode doesnt work

Top Replies