Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 28 subscribers
  • Views 17467 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Internet with Single WAN to Multiple LAN Sophos XG

pbjm 
Hello Everybody.

In first, excuse-me for My English, i'm a french. 

So now, i need your help please because i'm lost. 
I'm new user to Sophos XG. I'm a studient and i work in an enterprise. 
The enterprise is equipped of an appliance XG 115W and a router Netgear D6200. 

Context :
In order to of a project. I must create a second infrastructure isolated from the first.
For the moment, the enterprise is configured of this way :
- a bridge between LAN (of the enterprise) with WAN with IP : 192.168.0.3
- WAN IP : 192.168.0.1
- 2 Links is available on the appliance so 1 link for my infrastructure.

So how can i proceed for isolate my infrastructure with this limitation ?
My researches have give one solution : use the NAT.
But i stay blocked for the configuration NAT.
Please find attached the infrastructure. The red rectangle concerns my part.



Do you have an idea ?



This thread was automatically locked due to age.
Parents
  • 0

    Hi

    i now sure if this is the best solution for you but maybe you can try it anyway.

    First create a new zone (Type DMZ) for the net 192.168.2.0 and give the remaining interface on the sophos the ip 192.168.2.3.

    The Clients in your isolated zone get the 192.168.2.3 as a gateway.

    Then look at your firewall rules if your zones (LAN & "New Zone) can access each other, if yes, you can create a rule to deny it here.

    Regards,
    Max

Reply
  • 0

    Hi

    i now sure if this is the best solution for you but maybe you can try it anyway.

    First create a new zone (Type DMZ) for the net 192.168.2.0 and give the remaining interface on the sophos the ip 192.168.2.3.

    The Clients in your isolated zone get the 192.168.2.3 as a gateway.

    Then look at your firewall rules if your zones (LAN & "New Zone) can access each other, if yes, you can create a rule to deny it here.

    Regards,
    Max

Children