This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DMZ INTERFACE not working

Hi everybody,

in this text all IP are fictive. I have a server with Vmware Vcenter. Now I want put 3 VMs in DMZ Zone. So I have 1/4 Nic plugin with a switch connected with my Sophos, Port3(DMZ). When I want user my DMZ my Nic is <DOWN>. So no internet passthrough. And too my Alias not working !!!

Please I need help !

This thread was automatically locked due to age.

Top Replies

rfcat_vk over 3 years ago in reply to Cedric Parent2 +1

Hi, that is a /24 mask, not a /32 which is 255.255.255.255 Ian

Parents

0 FormerMember over 3 years ago

Hi Cedric Parent2,

Thank you for reaching out to the Community!

Did you configure Alias IP with /32 subnet mask? If not, can you try to change that and see if that helps?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Cedric Parent2 over 3 years ago in reply to FormerMember

Yes my alias is 27.54.117.39 | 255.255.255.0
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 3 years ago in reply to Cedric Parent2

Hi,

that is a /24 mask, not a /32 which is 255.255.255.255

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 rfcat_vk over 3 years ago in reply to Cedric Parent2

Hi,

that is a /24 mask, not a /32 which is 255.255.255.255

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Children

0 Cedric Parent2 over 3 years ago in reply to rfcat_vk

Yes Sorry just One IP disponible
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 3 years ago in reply to Cedric Parent2

Hi Cedric Parent2,

One limitation is that the Alias IP/Network is different from the original IP address assigned to the interface.

Limitation: Traffic from an alias network has to be masqueraded to reach other internal networks. Otherwise, the firewall will drop these packets as "Invalid Packets."

Reference: Sophos XG Firewall: How to configure an IP Alias.

Did you notice traffic being dropped on the firewall?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel