DHCP Relay over Route-based VPN

Question

Hello Community, 
 as discussed here: DHCP Relay over Routing-Based IPsec in SFOS 18.0.1 not working - Discussions - Sophos (XG) Firewall - Sophos Community 
 is DHCP Relay over Route-based VPN not supported and working on v18. I can confirm that is still not working on v18-MR5. Is there a timeframe when this feature will available? 
 
 Thanks, 
 Ben

LuCar Toni · Accepted Answer

Update: This is supported in SFOSv21.0: Sophos Firewall v21 Early Access Announcement

LuCar Toni · Answer

The limitation is documented here: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/NetworkDHCP.html?hl=dhcp%2Crelay 
 Currently no ETA planned for route based DHCP relay.

LuCar Toni · Answer

Actually you can. As RED is a Server/Client protocol, you can simply build two different tunnels between each IPs available. The Tunnels would be 24/7 active but only used, if the route is matching. Use Routing like Dynamic routing or static routing + metrics. 
 In the future, there will be solutions via SD-WAN (jitter etc.)

DHCP Relay over Route-based VPN

Top Replies