This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAN Multi-VLAN

Hello,

i'm moving from a Draytek Vigor 2920n to a Cyberoam iNG25 with SFOS, in the draytek we have mulit-vlan configured for wan.

The clients ISP is XS4ALL Fiber which needs VLAN TAG 6 to get Internet working and VLAN TAG 4 for IPTV.

We have on LAN P1 our normal Lan network going to a switch, and on P2 and P3 we have 2 televisions connected that needs VLAN tagging to work.

Below is a screenshot of the current config, Channel 1(VLAN 6) is needed for Internet Access Channel 3(VLAN 4) is the setting that we need for IPTV (channel 4 can be ignored), how would I need to config this in SFOS?

I want to use Port E and Port F for the televisions, Port A is used for LAN at the moment and Port B for WAN.

This thread was automatically locked due to age.

0 Arjan deJongste over 9 years ago

Is there nobody who can help me with this?
Cancel
Vote Up 0 Vote Down

Cancel
0 P.Groidis over 8 years ago in reply to Arjan deJongste

hi,

I know the thread is old, did you find solution to this? If no let me know
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to P.Groidis

Hi all,

you can create Additional VLAN on a WAN interface (default vlan is 1 and cannot be changed) as you add VLAN on internal interface.

At the moment there is not way to change the default vlan on the physical interface. Here the feature request:

http://ideas.sophos.com/forums/330219-sophos-xg-firewall/suggestions/10759326-allow-interface-port-to-be-configured-with-just-vl

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Arjan deJongste over 7 years ago in reply to P.Groidis

The solution was to use a managed switch, setup port 1 as a hybrid port and connect the XS4all cable in this port and use port 2 untagged with vlan6 and port 3 and 4 with untagged vlan 4. Then in the Sophos XG connect port 2 from the switch to the WAN port, change port 2 on the XG to a dummy LAN port with 1.1.1.1 255.255.255.255 and create a vlan port on top of it and set it to vlan 6 and type Wan.

However we still have some strange things that sometimes certain website aren't accessible even when all filtering was turned off.
Cancel
Vote Up 0 Vote Down

Cancel