This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG routing not working a vlan interface

Hi all ,

i have 2 vlans in my network on a cisco switch vlan 1 and vlan 2, each assigned on access ports on the switch

i am doing router on a stick model , link between switch and XG is trunk (trunk port on cisco)

on XG , there is a physical lan interface for vlan 1 192.168.1.254 , then a vlan interface on it in vlan 4 192.168.4.254

now ican ping both interfaces from vlan 1
XG can ping vlan 4
but no routing between vlan 1 and 4

rule is allow any any on xg

trace route from vlan 1 to vlan 4 , the xg routes vlan 4 traffic to the wan interface

can any one help ??

This thread was automatically locked due to age.

Parents

0 Vishal_R over 4 years ago

Hi Amr Kabary

Please add back route on XG for VLAN 4 network and check the PING/trace route from VLAN 1 machine to VLAN 4 machine.

Backroute you need to add on your switch IP which is connected with XG LAN Port.

This may fix this issue.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Amr Kabary over 4 years ago in reply to Vishal_R

thanks for the reply

but this is a router on a stick

in this model you dont create layer 3 interface on the switch
switch port facing xg is a trunk port
Cancel
Vote Up 0 Vote Down

Cancel
0 Amr Kabary over 4 years ago in reply to rfcat_vk

vlan 1 here is a physical interface not a vlan
Cancel
Vote Up 0 Vote Down

Cancel
0 Amr Kabary over 4 years ago in reply to Vishal_R

pinging from my machine in vlan 1 to vlan 4 1092.168.4.102 which is pingable from xg
Cancel
Vote Up 0 Vote Down

Cancel
0 Vishal_R over 4 years ago in reply to Amr Kabary

Hi

Can you also share the below output which I requested in previous comment.

console> sy dia utilities netconf route list

or from advance shell.

#route -n

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Amr Kabary over 4 years ago in reply to Vishal_R

shared it the first time but the photo was corrupted
Cancel
Vote Up 0 Vote Down

Cancel
0 Amr Kabary over 4 years ago in reply to Amr Kabary
Cancel
Vote Up 0 Vote Down

Cancel
0 Vishal_R over 4 years ago in reply to Amr Kabary

Hi Amr

Thanks for sharing it.

If possible please delete VLAN interface on XG and re add it ( may be some problem with firewall table) and share the status.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Amr Kabary over 4 years ago in reply to Vishal_R

the same

and iam still getting routed to the outside wan interface instead of inside on the vlan interface
Cancel
Vote Up 0 Vote Down

Cancel
0 Vishal_R over 4 years ago in reply to Amr Kabary

Hi Amr,

Please raise a support case to have investigation on it.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Amr Kabary over 4 years ago in reply to Vishal_R

OK
Thank you
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Amr Kabary
Amr,

in addition: it seems you are using a very old firmware 17.1 MR4. I would suggest you to:

delete all the routes and vlans

upgrade to latest release

add the new vlans and routes

From advanced shell, type "route" to print your XG's routing table.

Regards
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 4 years ago in reply to Amr Kabary
Amr,

in addition: it seems you are using a very old firmware 17.1 MR4. I would suggest you to:

delete all the routes and vlans

upgrade to latest release

add the new vlans and routes

From advanced shell, type "route" to print your XG's routing table.

Regards
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Amr Kabary over 4 years ago in reply to lferrara

lferrara ,

the same behavior is happening
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Amr Kabary

The routing table is correct. Are you sure everything is correct on Cisco side?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
+1 lferrara over 4 years ago in reply to lferrara

After investigating directly with the user, the problem was the route precedence in XG. He had 2 policy routes so traffic was forwarded to WAN interface. By creating a static route and changing the route precedence to static policy vpn, everything worked as expected.

community.sophos.com/.../123610

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Amr Kabary over 4 years ago in reply to lferrara

the config was correct , but there was a policy route that bypasses the static route

making my traffic destined for vlan 4 goes through the AN interface

thanks , Luciano
Cancel
Vote Up 0 Vote Down

Cancel