This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DHCP Relay over Route-based VPN

Hello Community,

as discussed here: DHCP Relay over Routing-Based IPsec in SFOS 18.0.1 not working - Discussions - Sophos (XG) Firewall - Sophos Community

is DHCP Relay over Route-based VPN not supported and working on v18. I can confirm that is still not working on v18-MR5. Is there a timeframe when this feature will available?

Thanks,

Ben

This thread was automatically locked due to age.

Top Replies

LuCar Toni 2 months ago +2 verified

Update: This is supported in SFOSv21.0: Sophos Firewall v21 Early Access Announcement

Parents

+1 LuCar Toni over 3 years ago

The limitation is documented here: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/NetworkDHCP.html?hl=dhcp%2Crelay

Currently no ETA planned for route based DHCP relay.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 Ben@Network over 3 years ago in reply to LuCar Toni

Hello LuCar Toni,

I tested the setup with RED-Tunnel between the XG Firewalls. With the RED Tunnel everything works as expected.
One Question for RED-Tunnel: Can I build redundant Tunnel like the route-based VPN?

Ben

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 3 years ago in reply to Ben@Network

Hi Ben@Network,

As far as I know, there's no option to build redundant RED tunnels.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 3 years ago in reply to Ben@Network

Actually you can. As RED is a Server/Client protocol, you can simply build two different tunnels between each IPs available. The Tunnels would be 24/7 active but only used, if the route is matching. Use Routing like Dynamic routing or static routing + metrics.

In the future, there will be solutions via SD-WAN (jitter etc.)

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 LuCar Toni over 3 years ago in reply to Ben@Network

Actually you can. As RED is a Server/Client protocol, you can simply build two different tunnels between each IPs available. The Tunnels would be 24/7 active but only used, if the route is matching. Use Routing like Dynamic routing or static routing + metrics.

In the future, there will be solutions via SD-WAN (jitter etc.)

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data