Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 7 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 24467 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to get DHCP Lease IP from my router (XG FIREWALL in Bridge mode)

Norman Fricker

Good morning everyone, a few days ago I started testing XG FIREWALL in a virtual machine with 2 NIC, in bridge mode. XG FIREWALL is located between my router and switch. I was able to navigate, manage to create users and generate rules to block and to authenticate with users. The problem I have is that DHCP-client computers are not able to get DHCP leased IPs from the DHCP Server (my router) .The first rule I have is LAN> WAN (any, any, any, ...) the default rule, at that moment the IP is perfect, but when I generate the rules to block  It does't block anything because the first rule is like a Free way. Could someone with more experience give me a hand? I Sent a screenshot.

THX for the help

 

 



This thread was automatically locked due to age.
Parents
  • 0

    Norman,

    dhcp requests are blocked unless you configure DHCP relay under Network > DHCP.

    Regards

  • 0 in reply to lferrara

    Hi lferrara, I 've done that configuration, I read it in an other answer you gave to an other guy. But still with this configuration If I fix my IP address I have no problem and if set  auto IP address I don't have internet. I dont know if its related or not, also I cant set the firewall rules right, If a leave the default rule on top (with fix IP or auto IP ) I have internet but I can't block nothing, the 3rd rule has no effect and if I put the 3rd rule on top and the default rule on bottom with fix IP I have internet an can block and also I can use the captive portal, but if I set auto IP I dont have internet because I dont have IP address. please can you help me with this?

    THX

    Norman

         

  • 0 in reply to Norman Fricker

    Norman,

    try this:

    • Disable also the rule WAN to LAN
    • Create a WAN to LAN where source is your DHCP server and destination is any as described here: https://community.sophos.com/kb/en-us/122983
    • Leave only the LAN to WAN firewall rule and apply filters there

    Regards

  • 0 in reply to lferrara

    lferrara,

     

    I've all ready made those changes yesterday, I saw that link you gave me.

    • I have 3 rules the last one is disabled
    • 1º rule LAN to WAN  and 2º WAN to LAN  and also IP host with my router IP address (DHCP_server), and I use it in de 2º rule in source. I read the link an double check. (sea atached JPG)

    I didn't understud the last item "Leave only the LAN to WAN firewall rule and apply filters there"

    • I only need to have 1 rule the LAN  to WAN ?
    • I cant do new rules?
    • Only filter through this rule? 
    • How I am suppose to create new rules? if I enable the 3º rule it dosnt do nothing

     

    sorry, I know I'm a pain in the back

    THX

Reply
  • 0 in reply to lferrara

    lferrara,

     

    I've all ready made those changes yesterday, I saw that link you gave me.

    • I have 3 rules the last one is disabled
    • 1º rule LAN to WAN  and 2º WAN to LAN  and also IP host with my router IP address (DHCP_server), and I use it in de 2º rule in source. I read the link an double check. (sea atached JPG)

    I didn't understud the last item "Leave only the LAN to WAN firewall rule and apply filters there"

    • I only need to have 1 rule the LAN  to WAN ?
    • I cant do new rules?
    • Only filter through this rule? 
    • How I am suppose to create new rules? if I enable the 3º rule it dosnt do nothing

     

    sorry, I know I'm a pain in the back

    THX

Children
  • 0 in reply to Norman Fricker

    Hi,

    you need to move the 2nd rule to the top of the list.

  • 0 in reply to rfcat_vk

    Hi, thanks for the help, Now its done.

    My question are,

    • if I add a third rule it need to be in the top?
    • just for playing, I add a third rule using user authentication (see screenshot) when the rule is on I can't get ip address from my DHCP ( in this case is my router) if I turn it off IP address just fine. I think that  with the third rule I override the first one, so if I don't authenticate I won't get my IP address. I'm right? if I'm right How I can get my IP address and authenticate in different rules?
    • If I add more rule They don' go in order, the go such a way that the don't override each other?

    thanks a lot

    Norman

  • 0 in reply to Norman Fricker

    Norman,

    rules are processed from top to bottom. As soon as the first rule is matched, the other rules are not checked.

    Regards