Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 10 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 1465 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall/routing question

John Giovannis

Hi,

I have a networking related question. I'm not sure if it's a configuration issue on the Sophos firewall.

  • I have a Sophos XGS 136 appliance with a number of physical interfaces configured with the following IP addresses: 192.168.100.1 and 192.168.200.220
  • The 2nd interface (192.168.200.220) is connected to another network via an old layer 2 switch
  • The Sophos appliance can communicate via ping to devices on the 192.168.200.0/24 network via the layer 2 switch
  • ... however a device on the 192.168.100.0/24 network (e.g. 192.168.100.2) is not able to communicate with the 192.168.200.0/24 network
  • The device with IP address 192.168.100.2 can ping 192.168.200.220 but not the gateway at 192.168.200.1

Refer to the attached diagram which clearly shows the network topology.

Note there are no free interfaces on the gateway device 192.168.200.1 - i.e. The only option I have is to work with the current topology

I'll need a bit of guidance on troubleshooting, provide it's a simple configuration changes on the Sophos appliance.

Cheers,

John

Network topology



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to John Giovannis

    What does the XG do and why isn’t your gateway?
    ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    The Sophos XGS is a gateway to another (new) network. The intention is to "gradually" migrate from the 192.168.200.0/24 network to the 192.168.100.0/24 network and remove the linux gateway once the migration is finished.

    I'm well aware I have to be careful I don't create any unintended network loops, correct ?

  • 0 in reply to John Giovannis

    Hello John,

    you need to define a route to the 192.168.100.0/24 network on the gateway 192.168.200.1.

    If you finished migrating to the new net, you can remove this.

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.

  • +1 in reply to jprusch

    Thanks for that. I did in fact do something like 
    ip route add 192.168.100.0/24 via 192.168.200.220 on the linux gateway machine, yesterday with some success

    192.168.100.2 can ping most machines on 192.168.200.0/24 via the gateway at 192.168.200.220

    I think this problem can be put to bed.

Unfiltered HTML