Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Deploying/configuring multiple vlans efficiently

I'd like to set up multiple vlans on my utm software appliance.

Each vlan requires dhcp, dns, masquerading and firewall rules (and maybe some others).  Rather than configuring each vlan separately, is there a way to configure a block of vlans?  That is, to assign several of the above components to a single vlan, then duplicate it, only changing certain parameters?



This thread was automatically locked due to age.
Parents
  • Hi Jay Jay,

    Currently, there's no option to configure a block of VLAN's via WebAdmin or CLI. But to simplify your configurations, you can create a Network Group definition where you specify your VLANs and use that group when configuring Masquerading, Firewall Rules, DNS, etc. (Of course, that's under the assumption the same MASQ, firewall rules & DNS will be applied to all your VLANs).

    You can also clone your VLAN interfaces and go in and edit the VLAN tags.

    Just some suggestions to make configuration a little simpler. I suggest you submit a feature request so that maybe we'll see it integrated in the future.

    Cheers,
    Karlos

    Karlos
    Community Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.
Reply
  • Hi Jay Jay,

    Currently, there's no option to configure a block of VLAN's via WebAdmin or CLI. But to simplify your configurations, you can create a Network Group definition where you specify your VLANs and use that group when configuring Masquerading, Firewall Rules, DNS, etc. (Of course, that's under the assumption the same MASQ, firewall rules & DNS will be applied to all your VLANs).

    You can also clone your VLAN interfaces and go in and edit the VLAN tags.

    Just some suggestions to make configuration a little simpler. I suggest you submit a feature request so that maybe we'll see it integrated in the future.

    Cheers,
    Karlos

    Karlos
    Community Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.
Children
  • Karlos, I'm resisting XG for the time being, but isn't this something that's more easily done with XG?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Indeed. You can clone Firewall rules or with a single Firewall Rule, specify multiple VLANs, and if all settings are the same, it will allow you to configure Traffic Shaping, Web Filtering, Application Filtering, Masquerading, etc all within one module.

    Cheers,
    Karlos

    Karlos
    Community Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?