Sophos Firewall

Discussions RED cant connect to local LAN

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 9 replies
Answers 1 answer
Subscribers 27 subscribers
Views 24059 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RED cant connect to local LAN

panic over 9 years ago

Hi Guys,

i got the following scenario running:

Firewall XG with the following local Network: 192.168.123.0/32

Red50 with the following local Network: 192.168.121.0/32

Everything works fine so far. But i just cant connect from Red Network into local XG Network.

Any Ideas?

This thread was automatically locked due to age.

Parents

0 Sergio Dagoldol Jr. over 8 years ago

same here also

xg 125 local network 172.16.16.0/ 24

red15 network 192.168.9.0/24

mine is xg network can ping red15 network but red15 network cant ping xg125 network.

help pls...
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Sergio Dagoldol Jr.

Sergio,

please share the configuration you have done with all the IP. Make sure the RED at remote site is obtaining an IP from remote DHCP server (router for example).

Also make sure proper ports are opened at remote site.

Waiting for your screenshots.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Sergio Dagoldol Jr. over 8 years ago in reply to lferrara

my red configuration

my interfaces
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Sergio Dagoldol Jr.

Did you create a LAN to LAN rule?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Sergio Dagoldol Jr. over 8 years ago in reply to lferrara

YES
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Sergio Dagoldol Jr.

Sergio,

make sure at remote site, the Router has a DNAT rule to RED WAN port. Here the port list:

https://community.sophos.com/kb/en-us/122755

From the remote site, if you try a tracerout from a computer to a HQ ip, what is the result?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Sergio Dagoldol Jr. over 8 years ago in reply to lferrara

hello,

i cant ping the red network from xg
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Sergio Dagoldol Jr.

Sergio,

send me a PM and I will have a look at your config.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 8 years ago in reply to Sergio Dagoldol Jr.

Sergio,

send me a PM and I will have a look at your config.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data