This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Pfsense + Sophos XG in Bridge Mode (VM ESXi 6.5)

Hi,

I'm having problems getting Sophos XG up and running in Bridge Mode on VMware ESXi 6.5 in my home environment.

My current setup is:
Internet -> Modem (Bridge) -> Wan Interface (public IP) -> Pfsense -> LAN Interface (192.168.1.1) -> 16 Port Switch -> Devices (192.168.1.0/24).

This works nicely.

I would like to setup Sophos in Bridge Mode (Vmware), so I can do Web filtering etc in the following setup:
Internet -> Modem (Bridge) -> WAN Interface (public IP) Pfsense - LAN Interface (192.168.1.1) into WAN Interface Sophos XG (Bridge Mode) - LAN Interface -> 16 Port Switch -> Devices

The VMware box has Quad Port NIC card with 2 x vSwitches, one for Port 1 (LAN) and one for Port2 (WAN) with Promiscuous Mode enabled for both vSwitches.

Following this post:

https://community.sophos.com/products/xg-firewall/f/network-and-routing/76025/bridge-mode-deployment-not-working

Initial setup of the of the VM is fine (using sophos xg ISO) allowing me to access the Web Admin interface in order to continue setup and activation which works in gateway mode...

Continuing I go through the setup wizard and select Bridge Mode and setup the bridge between Port1 (LAN) and Port2 (WAN) and give it an IP (192.168.1.18)

I then remove the LAN interface cable from the pfsense box and and attach the WAN interface (Port2) to the Pfsense (LAN interface). 

I am able to get access to the Bridge IP address on 192.168.1.18, but am unable to ping the Gateway which is setup for the Bridge (192.168.1.1) - pfsense box?
I am unable to access the internet from any device on the LAN or resolve any internet hosts through the diagnostics through the admin GUI.
The status of the Bridge is showing as being red. Port1, Port2 & br0 are showing as being connected in the GUI..

I am using a cross-over cable between pfsense and vmware NIC (Port 2 - WAN)...outcome was no different to when I was using a straight through.

What am I doing wrong here? Do I need to do something on the pfsense box to make this work. I didn't think so as it is meant to be a bridge setup.
Please help.

Thanks!

Regards
pdaemon



This thread was automatically locked due to age.
Parents Reply Children
No Data