Red Site-to-Site Config question

Bill,

the IP used for RED connection must be not used by any other interfaces or routing inside XG. This applies to both Server and Client. So use a network that is not used in both sides.

Also on RED server side, put an ip (192.168.30.10/24) that is in the same subnet as the client and viceversa. So on client in this example put 192.168.30.20/24.

Regards

Thanks Luk, appreciate the clarification! 

Any reason to use a /24 rather than /30 when it is a point to point connection?

No issue to selecting another subnet. However if you select /30, RED configuration will not apply. Know bug.

Hi Luk,

What do you mean by it won't apply, we use a /30 and it works fine or am I missing something?

Cheers,

Charles

Charles,

from the Know Issue list:

https://community.sophos.com/kb/en-us/124067

check NC-15962: [RED] Cannot select 255.255.255.252 network in Red netmask in Red Network setting 

Maybe it has been fixed??????

Hi Luk,

Recently tried to do this with /30 and it barfed saying it needed /29 minimum.  This was on MR5, so not fixed.

Thanks,

John

I created a RED legacy server on the XG pair and a RED client on a UTM pair, perhaps this is why it allows /30?  The tunnel in question now only passes traffic one way so I changed it to a /29 at both ends but no joy...  Shame as it was working well before MR5

I created a RED legacy server on the XG pair and a RED client on a UTM pair, perhaps this is why it allows /30?  The tunnel in question now only passes traffic one way so I changed it to a /29 at both ends but no joy...  Shame as it was working well before MR5