This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Multiple VLANS 1 interface

Hi

I have an router from my provider that separates 3 vlans.
VLAN 6 = internet
VLAN 4 = IPTV
VLAN 7 = Voip
I want to replace the router from my provider (Experiabox) with the Sophos UTM to handle the internet traffic.
I have a computer running sophos 9.313-3 with 4 NIC's
1 WAN
2 LAN
1 port for the Experiabox (Provider router) that has to handle TV and Voip.

I've configured the wan interface with ppoe on VLAN 6 and internet is working
The only thing is I want to bridge the WAN interface with VLAN 4 and 7 to the interface that goes to my ExperiaBox.

Is this possible and if not is there an other way the make the experiabox only handle VLAN 4 and 7 and the Sophos handles VLAN 6?

This thread was automatically locked due to age.

0 apijnappels over 9 years ago

Not sure but it "may" be possible to also add those VLAN's to the WAN interface.
I did hear before however that you may still need to keep the Experiabox. If you have a range of IP-addresses you may just be able to assign one (or more) public IP-addresses to the UTM.

Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
Cancel
Vote Up 0 Vote Down

Cancel
0 alan_smithee over 9 years ago

I tried this but I've read in a article of Netwerkje that I have to put those 2 vlan's in bridge mode

This setup won't work when I connect the experiabox to eth3

And I can't configure a bridge. The error 'invalid convert interface on bridge' shows up.
Cancel
Vote Up 0 Vote Down

Cancel
0 alan_smithee over 9 years ago

I can't create a Ethernet VLAN on the interface neither because the error 'interface type rquires exclusive acces to the network interface'
Cancel
Vote Up 0 Vote Down

Cancel
0 apijnappels over 9 years ago

Hi, I just read some pages on the website you referred to. I believe they indicate that you would need a VLAN capable switch connected to your NTU (supposing you have a fiber connection). This switch would need the VLAN's 4, 6 and 7 on a trunk connected to the NTU. Then you can connect the UTM to a second switchport that is in VLAN6 (data VLAN). This doesn't have to be a trunkport and the UTM doesn't have to have a VLAN interface for this.
You can then have a third port on the switch configured as a trunk with VLAN's 4 and 7 which you need to connect to the Experiabox's WAN port.

That way the experiabox will deliver IPTV and Voip whereas your UTM will handle all the internet traffic.
You can if you like also make an untagged VLAN4 port on the switch and put the IPTV player on it so your IPTV is also bypassing the experiabox. The experiabox is needed for Voip so I don't think you can completely replace it.

Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
Cancel
Vote Up 0 Vote Down

Cancel
0 alan_smithee over 9 years ago in reply to apijnappels
Thank you for your trouble going through the material on the website.

I was hoping that I wouldn't need a switch and let the UTM handle al the traffic and VLAN bridging.

On the refered website it also states that this is possible with the MikroTik router.

This would be the config for the Mikrotek router:

/interface vlan
add interface=ether1-gateway l2mtu=1594 name=vlan1.4 vlan-id=4
add interface=ether1-gateway l2mtu=1594 name=vlan1.7 vlan-id=7

add interface=ether10 l2mtu=1594 name=vlan10.7 vlan-id=7

/interface bridge
add name=bridge-iptv

/interface bridge port
add bridge=bridge-iptv interface=vlan1.4
add bridge=bridge-iptv interface=ether6

/interface bridge
add name=bridge-tel

/interface bridge port
add bridge=bridge-tel interface=vlan1.7
add bridge=bridge-tel interface=vlan10.7

Are you sure this isn't possible with the Sophos UTM? I've been searching the web for Sophos VLAN bridging but I can't find a decent article
Cancel
Vote Up 0 Vote Down

Cancel
0 apijnappels over 9 years ago

I don't think it's possible. You would need a bridge between a logical and a physical network interface which I believe is not possible on the UTM.
You can however use a very simple and low priced Netgear 5-port smart-managed switch to achieve this.

Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
Cancel
Vote Up 0 Vote Down

Cancel

Multiple VLANS 1 interface

Submitted a Tech Support Case lately from the Support Portal?