This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

virtulaized Sophos - bridged Interface Problem

Hi,

I have the same question make into the UTM Firewal Forms postet, but don`t get
a answer. So I try to post my problem here into the english Forum.

I have a question about the Sophos Firewall and specifically the bridge there. I have
virtualized by Sophos in Hyper-V. My configuration looks like this:

- Sophos with 4 interfaces:

     - LAN1 => INTERNAL

     - LAN2 => WAN interface

     - LAN3 => INTERNAL

     - LAN4 => INTERNAL

I then configured LAN1 and LAN2 as a bridge. Everything works over LAN1,
only when I connect a device to LAN3 do I see something connected on the Sophos
is but I can't ping this device or get any IP there if I get one there connect laptop
with DHCP.

Does anyone know if the bridge interface doesn't work so well in virtualization?
I would be happy if someone can help me there. Can't reply until later this evening though
to questions because the test environment is at my house.

Best regards

Hans Jürgen Günter

This thread was automatically locked due to age.

0 Erick Jan over 1 year ago

Hi Hans,

Thank you for reaching out to Sophos Community.

Have you created an FW policy for LAN 3 allowing access/ping to LAN1/LAN2

Also, kindly check the logs/log viewer that might assist us with what has happened to the packet.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Hans-Juergen Guenter over 1 year ago in reply to Erick Jan

Hi Erick,

no I don`t have create a FW Policy for LAN3 because LAN1 and LAN3 are
in a Bridge Interface. And from LAN1 Interface I have get IP via DHCP and
the Clients can go to Internet if they connect over a Switch via LAN1(bridge mode).
Cancel
Vote Up 0 Vote Down

Cancel
0 Erick Jan over 1 year ago in reply to Hans-Juergen Guenter

Hi Hans,

Would it be possible to share a screenshot of your configuration?

Also, are LAN 1 and LAN 3 in the same zone? and you’re experiencing an error in communicating when connecting a device to LAN 3 going to LAN 1?

Does the IP range of your DHCP include the range of LAN3?

Try assigning a static IP from your LAN 3 and test if able to PING/Access.

To allow traffic between bridged interfaces, you must create a firewall rule allowing traffic between the zones assigned to the interfaces.

You may see references for Bridge interfaces

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Hans-Juergen Guenter over 1 year ago in reply to Erick Jan

Hi Erick,

I am now in my Office and the system stays in my Homeoffice. But I try
to go maybe in 30min to my Homeoffice. Than I can make snapshoots
and post them.

Witch snapshoots do you need?
Cancel
Vote Up 0 Vote Down

Cancel
0 Erick Jan over 1 year ago in reply to Hans-Juergen Guenter

Hi Hans,

Kindly share all the related configurations for your query if possible.

Also, do a test with regard to setting up a static IP to the device connected to LAN3.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Hans-Juergen Guenter over 1 year ago in reply to Erick Jan

Hallo Erick;

I coundn`t make a screenshoot yesterday. Maybe I can do it at Thursday,
because today I am not in my Homeoffice.

Best Regards
Hans-Jürgen Günter
Cancel
Vote Up 0 Vote Down

Cancel