This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

InterVLAN Routing Issue

Hi All,
I hope someone can point me in the right direction. I'm having an issue seeing devices on VLAN 1 from another VLAN. Here is my config before I start:

Sophos UTM 220, eth0 to trunk port on a Cisco switch
eth0 has VLAN 1, 20, 30 configured
Trunk port on switch has all VLAN's assigned
-VLAN 1 is 10.0.1.1/24
-VLAN 20 is 10.0.2.1/24
-VLAN 30 is 10.0.3.1/24

When on VLAN 20 and plugged into the switch, I can reach the Sophos UTM gateway on both VLAN 20 and VLAN 30 networks (so 10.0.2.1 and 10.0.3.1), and I also get inet.

I know this must be a firewall or network definition issue. But can't seem to figure it out. These are my first Sophos UTM's, I'm usually more familiar with Fortigate, Sonicwall, Checkpoint, etc.

Any ideas?

This thread was automatically locked due to age.

0 Marzetti over 10 years ago

As an example, I'm on VLAN 20 (subnet 10.0.2.1/24) and I'm trying to reach a web interface on VLAN 1 (subnet 10.0.1.1/24). The device with the web interface is connected to a port on the switch, the switch is connected via it's trunk port to eth0 on the UTM.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 10 years ago

Hi,

My understanding was that VLAN1 is not usable with the UTM as it's reserved for the Sophos APs.

However, I may be wrong.

There is another discussion at
https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/33898

with a new post this week.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Marzetti over 10 years ago in reply to BarryG

My understanding was that VLAN1 is not usable with the UTM as it's reserved for the Sophos APs.

Thanks, Barry. That would be troubling news though, considering how many organizations and vendors use VLAN 1 for set-ups/management, etc. I really hope thats not the case.
Cancel
Vote Up 0 Vote Down

Cancel
0 Marzetti over 10 years ago in reply to Marzetti

Thanks, Barry. That would be troubling news though, considering how many organizations and vendors use VLAN 1 for set-ups/management, etc. I really hope thats not the case.

So I got around to moving everything to VLAN 10 instead of 1, and yes, looks like VLAN 1 is unusable. >_
Cancel
Vote Up 0 Vote Down

Cancel