We have 40 Srvers and we want all the users to connect the servers through XG-136. We have 40 Switches out of which 4 are connected to servers. All of these switches which are connected to servers I want to connect them to North End of the Firewall and our L3 will be connected to south end of the Fitewall. Servers IP addresses are 18.104.22.168/24 whereas Switches have 22.214.171.124/24 as their Managemen IP.s. Users are devided into 4 VLANs. 126.96.36.199/24, 188.8.131.52/24, 184.108.40.206/24, 220.127.116.11/24 respectively
Kindly advice how to configure Firewall ports for switches which are connected to servers.
Hi EDP AFRO,
Thank you for reaching out to Sophos Community.
What are you referring to North End and south end of the firewall?
It would be great if you can share a rough diagram of your network environment.
EDP AFRO said:Servers IP addresses are 18.104.22.168/24 whereas Switches have 22.214.171.124/24 as their Managemen IP.s.
You can configure a physical interface with 126.96.36.199/24 subnet and then configure routing on Sophos Firewall to connect to server network 188.8.131.52/24. Assuming this interface is kept in the DMZ zone.
EDP AFRO said:Users are devided into 4 VLANs. 184.108.40.206/24, 220.127.116.11/24, 18.104.22.168/24, 22.214.171.124/24 respectively
For users, you can configure VLAN interface(all are in LAN zone) on Sophos Firewall with required VLANs.
Sophos Firewall: Configure Virtual LAN
After that create a LAN to DMZ & DMZ to LAN firewall rules to allow communication between servers and users.
You may also reach out to Sophos Professional Services to help you to deploy and securely configure Sophos products with organization's security requirements and Sophos best practices.
Thanks sir, for your prompt reply. I have already configured VLAN on incoming connection from L3 switch. Shall I configure LAG on all the connections of L2 switches at Sophos with IP 126.96.36.199/24. Kindly advice.
Yes, you can configure LAG for L2 switches with 188.8.131.52/24 subnet.