How can i read this port config ?

RE: How can i read this port config ?

Bharat J — Thu, 07 Jul 2022 11:28:06 GMT

If your ISP has provided you IP Pool you can configure same IP Pool on the Sophos XG interface where the same ISP is connected as Alias IP.

below is the use case of alias IP :

https://support.sophos.com/support/s/article/KB-000036735?language=en_US

If a post solves your question please use the 'Verify Answer' button.

RE: How can i read this port config ?

Fotit — Wed, 06 Jul 2022 21:32:01 GMT

Ok good farshid, but what is the purpose to have one ls link 10mbps for example, and define two or three aliases (ips).

The destination of traffic will ne the same, no?

RE: How can i read this port config ?

Farshid — Wed, 06 Jul 2022 19:53:36 GMT

Port6:0 and Port6:1 is like additional ip addresses on a computer's NIC. FW replies to arp requests for all 3 ip addresses with Port6 mac address.

You can find more info here: docs.sophos.com/.../index.html

RE: How can i read this port config ?

Fotit — Wed, 06 Jul 2022 14:55:23 GMT

But i need to know how it works? when the packet go from lan to wan (internet)

the ip public and private are configured on external interface (Port 6).

port6:0 and port6:1 are they sub-interfaces or no?

RE: How can i read this port config ?

Farshid — Wed, 06 Jul 2022 12:53:58 GMT

Probably you have connectivity with ISP gateway via private IP address on main interface and users internet access provided via one of public addresses. Because only public addresses are routable in internet. Take a look at FW nat rules and you will find a SRC NAT rule that uses one of these addresses as translated source instead of MASQ which will use private address.

In fact in ISP GW, those public IP addresses routed to private address that is set on the main interface.