Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 12 replies
  • Subscribers 41 subscribers
  • Views 3134 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

APX AP after RED device

helmut willems

We put a APX AP after a RED device , but is doesn't show up at the XG managment tool.

 

LED is solid green.

 

Can someone point me in the good direction ???



This thread was automatically locked due to age.
Parents
  • 0

    hello ,

     

    The APX receive a IP addres so that's OK , i can register the AP in Central

     

    The Red is in Standard/Unified mode


    tcpdump 'host 1.2.3.4 give me this

    13:51:51.618298 reds1, IN: IP 10.10.0.158.47743 > 1.2.3.4.2712: Flags [S], seq 3561524411, win 29200, options [mss 1300,sackOK,TS val 4294943223 ecr 0,nop,wscale 6], length 0


    can someone tell me simple how to route

  • +1 in reply to helmut willems

    Hi  

    Thanks for the sharing the packet details.

    As per the packet request, the AP is getting leased IP 10.10.0.158 and it is communicating with 1.2.3.4.2712 ( awed service - Service for wireless protection).So it should come under "Pending Access Point".If it is not coming under pending list then create a plain rule for APX IP 10.10.0.158 or what ever IP getting leased on XG to allow Internet or firmware download request. If any packets going towards WAN from APX IP then it is trying to get firmware and wait for few minutes till firmware of APX get updated.

    Later on you may check again "Pending Access Point" and if still not coming then try by rebooting APX once and confirm.

    Regards,

    Vishal Ranpariya
    Technical Account Manager | Sophos Technical Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'Verify Answer' link.

  • 0 in reply to Vishal_R

    i don't understand this.

     

    What do you mean with create a plain rule ??

    When i register with central i can see the APX , so there is traffic to WAN.

     

    do you have example for a plain rule ?? mean this if i have multiple APX i need always create a pain rule

  • 0 in reply to helmut willems

    Hi  

    Plain rule mean the rule with no scanning and no policy for APX leased IP and just to confirm the APX is not having any issue to download the firmware due to scanning or policy present on rule( this will not required all the time for all APX).

    APX wireless access points Integration with APX firmware revision 2.1.1-3 and higher will be supported by the Sophos XG Firewall.Due to this reason if any APX not running with the above version [2.1.1-3 ] then first it will go for the version upgrade once it will get Internet and then that APX will come under pending list.

     All details briefly mentioned on below official KBA with FAQ:

     https://community.sophos.com/kb/en-us/133505

    I    f still you are not getting APX under pending list and not getting any logs for the same APX under awed.log then you may log a support case to investigate the issue further. 

    Regards,

    Vishal Ranpariya
    Technical Account Manager | Sophos Technical Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'Verify Answer' link.

  • 0 in reply to Vishal_R

    Ok , 

     

     

    will try monday when i am on my work

     

    But please don't forgert the APX is after a RED device

  • 0 in reply to Vishal_R

    the Firmware of the connected AP is : v2.2.0-19

     

    but it don't show up in the XG

     

    the AP is behind a RED device.

Reply Children
Unfiltered HTML