Need advise about sophos home edition

If you only have 2 physical interfaces, then you must configure the internal interface to use VLAN's. That's how you can assign multiple networks (vlan) to a single physical interface.

If you need more help, please be more detailed in where exactly you need help with.

I must add additional VLAN interface on sophos ?

Yes, can only add multiple logical subnets onto 1 physical interface by using VLAN. It has to be 802.1q VLAN, so your switch must also be configured accordingly.

One physical interface can be of the type ethernet *and* ethernet vlan, both at the same time.   As mentioned, you'll need to have your switch set up to properly handle tagged and untagged frames.  The traffic on the interface assigned as ethernet (not vlan) gets passed to what ever _default_ vlan you have assigned on your switch.

In the example below, eth2 is physical port 3 on my qotom box.  Actually it might be a different port, but because utm runs under exsi, I have ports mapped as eth0..3 to correspond to physical ports 1..4, in order.  As you already probably know, each subnet will need its own dhcp setting, masquerading (if you want internet access), and firewall rules set up.

One physical interface can be of the type ethernet *and* ethernet vlan, both at the same time.   As mentioned, you'll need to have your switch set up to properly handle tagged and untagged frames.  The traffic on the interface assigned as ethernet (not vlan) gets passed to what ever _default_ vlan you have assigned on your switch.

In the example below, eth2 is physical port 3 on my qotom box.  Actually it might be a different port, but because utm runs under exsi, I have ports mapped as eth0..3 to correspond to physical ports 1..4, in order.  As you already probably know, each subnet will need its own dhcp setting, masquerading (if you want internet access), and firewall rules set up.

For example : Sophos homde edition have 2 physal interface: 1- lan, 2-wan.   with 1-lan pyhyssal interface i can create separate  logical VLAN interface ?

Yes.  As you make your way through this, don't forget to leave yourself a way into webadmin in case something goes wrong.

Ok thanks .. i am going to check this