Routed Subnet

Van,

I am missing something about your config. The /27 subnet has the same IP as the WAN interface?

Please put some IP example.

ARP proxy can be configured as described here:

https://community.sophos.com/kb/en-us/123525

Thanks

Hi lferra, thanks.

WAN x.y.z.100/30
GW x.y.z.101
Interface on 102

Routed subnet:
x.y.z.224/27
Currently only using one address in the /27, e.g. x.y.z.240

Something like this.

Van,

thanks for the diagram and info. So, it seems you have 2 firewalls. Is the one on the left you have to swap with XG?

You can simply configure a VLAN on your Internal Interface. Keep in mind that at the moment on physical interface, there is no way to change the native VLAN ID, so when you create the Interface, the VLAN ID will be 1 and then create a VLAN interface on top of it. Make sure then to create the needed firewall rules.

Regards

Hi lferrara, thanks.

My diagram needed some more labels. The left one belongs to my company, it's being replaced with an XG. The right one belongs to someone else, we provide them dmz net. I have no access to it.

VLANs won't be an issue. I'll mirror the setup we have now. I can't get my head around how the firewall can route the traffic for the second subnet without any other setup.

Side question on the arp neighbour setup: The gui forces you to enter a MAC, on the current setup there is a dummy mac address (00:00:00:00:00:00). If I wanted to publish a x.y.z.224/27 address do I use the mac of the XG WAN port?

Thanks for all of your advice.

Van,

if you do not have access to the other Firewall, create a static route from Routing menu where the remote network is x.x.x.x using interface or next hop.

Regards