Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Home license with wireless protection

Hi Guys,

I have an old SG135 appliance which was converted from UTM to run SG some while ago. The licenses have expired and I have set it up with the XG firewall in my home and this works with the base license which has wireless functionality which I use with an AP100. Unfortunately due to IPV6 support missing on the device I want to move back to the UTM software.

I have a UTM license file and have downloaded the recovery disk, but the license I have has an expired wireless protection subscription. Is it correct that on the UTM software the base networking package which does not expire does not include the wireless support so for this I will need a new license? If I go with the home license will this include wireless protection and allow me to use the AP100?

Lastly, I seem to remember that if you use the home license you need to delete a file from the installation (IIRC its /etc/asg but could be wrong), if this file is deleted does the appliance lose any other functionality? I don't have an LCD screen on this model, but want to use the appliance installation media as I need to install headless as I don't have a VGA monitor.

Thanks.
Andrew.



This thread was automatically locked due to age.
Parents
  • Hi,

    Well I set up the UTM9 as discussed and it all seemed to go well but it doesn't appear I can configure IPV6 on that either. I am using a provider that gives me a connection over Ethernet and I need to use SLAAC to get the IPV6 details. When I enable IPV6 on the device it sits there and never shows anything in the system other than no IPV6 connectivity available. The watchdog just sits with the following in the log:

    2019:09:12-18:24:20 gollum ipv6_watchdog[10303]: Starting IPv6 address watchdog
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: JSON "eth1", "up", { "gateway6": "::", "network6":"1"}
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: JSON "eth1", "up", { "address6": "::", "netmask6": "0", "network6":"1" }
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: Start of monitoring interface eth1(ifidx 3)
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: Installing default route via fe80::2ab4:48ff:fe87:c9fb for interface eth1(ifidx 3)
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: RA flags changed for interface eth1(ifidx 3): NONE -> SENT,RCVD,OTHER,READY

    Any suggestions? Thinking of giving up at this stage until XG has better iPV6 support.

    Andrew.

Reply
  • Hi,

    Well I set up the UTM9 as discussed and it all seemed to go well but it doesn't appear I can configure IPV6 on that either. I am using a provider that gives me a connection over Ethernet and I need to use SLAAC to get the IPV6 details. When I enable IPV6 on the device it sits there and never shows anything in the system other than no IPV6 connectivity available. The watchdog just sits with the following in the log:

    2019:09:12-18:24:20 gollum ipv6_watchdog[10303]: Starting IPv6 address watchdog
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: JSON "eth1", "up", { "gateway6": "::", "network6":"1"}
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: JSON "eth1", "up", { "address6": "::", "netmask6": "0", "network6":"1" }
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: Start of monitoring interface eth1(ifidx 3)
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: Installing default route via fe80::2ab4:48ff:fe87:c9fb for interface eth1(ifidx 3)
    2019:09:12-18:24:25 gollum ipv6_watchdog[10303]: RA flags changed for interface eth1(ifidx 3): NONE -> SENT,RCVD,OTHER,READY

    Any suggestions? Thinking of giving up at this stage until XG has better iPV6 support.

    Andrew.

Children
No Data