mikrotik + sophos home vlan

Hello there,

Good day and thanks for reaching out to Sophos Community

Could you share your Sophos Home network configuration? 

Thanks

router 192.168.1.1/24 vlan 10.10.10.1/24

sophos 192.168.1.23 (Bridge)

I sent links to screenshots but they were considered span

thank you very much for your interest !!!

Andrzej 

Hello

Thanks for these details. What port on the router did you connect your Sophos Firewall? is it on the 192.168.1.1? if so can you ping it from the Firewall?

Also you may paste your screenshot on your next comment instead of posting links. Thanks

Cheers

Hello

yes to router 192.168.1.1

mikrotik port2 

and on vlan10 it gets an address from DHCP but no longer to the Internet!

without a vlan, it obtains an address from the pool 192.168.1-100/24 and the ping is on the router's gateway, i.e. 192.168.1.1

Sorry for so many photos!! but I think it will be more readable !!

1. On PC from address 192.168.1.-100
ping 10.10.10.1 is OK

2. On PC from address 10.10.10.-254

C:\Users\admin>ping 10.10.10.1

Pinging 10.10.10.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 10.10.10.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

there is no ping on the gate!!!! that is 10.10.10.1

Hello,

Thanks for these details. Why do you need VLAN10 for? also is it a sub-interface on the Mikrotik Router? You could use the 192.168.1.x/24 network and use FW as DHCP to simplify network flow. Then change FW policy Source: LAN Source Network: 192.168.1.x/24 | Destination Zone: WAN, Destination Networks: Any

hello 

Thanks for your answer, maybe that's a good idea .

Why vlan10? VERY GOOD QUESTION - :) I have 2 Access Points - Ubiquiti connected and there I would like to implement vlan10 for the needs of "guest" a separate network! I have a controller on Raspberry Pi

Yes it is sub-interface on the Mikrotik Router !!

Hello,

Thank you for these additional information, if this is the case you need to add VLAN to the bridge, you may follow this doc guide on how to configure it on CLI: doc.sophos.com/.../index.html

Cheers,

hello

thank you so much for your help!! I can see that I still have a lot to learn - :)

but it will help! thank you again

Andrew

hello

thank you so much for your help!! I can see that I still have a lot to learn - :)

but it will help! thank you again

Andrew