This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Basic setup with WAN, LAN and WLAN

Hello together,

i tried to setup a basic configuration, but have some Problems with my WLAN.

I connect my FritzBox as exposed host to the WAN Interface on my Sophos Firewall.

I create a second Interface LAN, where my clients are located. That is working fine and my Clients have access to the Internet.

Also i want to configre a WLAN Network to connect mobile devices and grant them access to the Internet. So i create a Interface WLAN and connect a little

POE Switch to that Interface. I plug in a APX120 AccessPoint to the POE Switch and add the WiFi Zone to the default Network Policy to allow connect over WAN to register my access Point.

Problem is, that my accespoint is not visible to register.

What im missing?

Maybe it is a stupid question but thank you for your help...

Thorsten

This thread was automatically locked due to age.

Top Replies

rfcat_vk 10 months ago in reply to Thorsten User +1 suggested

Do you have the Wireless security function enabled? you need to create SSIDs, wireless groups. Does the PoE port show lights and activity on your switch? Ian

Parents

0 Thorsten User 10 months ago

Good Morning!

Here is my full Setup...

On Sophos defined 4 Interfaces: WAN, LAN, WLAN and DMZ

WAN has ip 192.168.178.2 and as additional adress 192.168.50.2

LAN has 192.168.50.1

WLAN 192.168.30.1

At LAN is a switch connected for the clients (PC's)

At WLAN i connect a poe switch for the sophos apx120 accespoint (full reseted).

In default Network Policy i add the LAN and WLAN as allowed networks to WAN.

PC's are manuall configured with a adress from LAN Interface (192.168.50.x) and as gateway the LAN Interface IP.

Clients could connect to Internet

DHCP Interface configured for WLAN Interface with gateway 192.168.30.1

No additional Routing, etc

If i want to register the accesspoint, it is not visible. (on Firewall and in Sophos Central)

Questions:

Is it the best option to configure an additional adres for WAN or is a NAT config the better way?

What im missing to get the accesspoint visible to register?

Thanks a lot!

Thorsten
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Thorsten User 10 months ago

Good Morning!

Here is my full Setup...

On Sophos defined 4 Interfaces: WAN, LAN, WLAN and DMZ

WAN has ip 192.168.178.2 and as additional adress 192.168.50.2

LAN has 192.168.50.1

WLAN 192.168.30.1

At LAN is a switch connected for the clients (PC's)

At WLAN i connect a poe switch for the sophos apx120 accespoint (full reseted).

In default Network Policy i add the LAN and WLAN as allowed networks to WAN.

PC's are manuall configured with a adress from LAN Interface (192.168.50.x) and as gateway the LAN Interface IP.

Clients could connect to Internet

DHCP Interface configured for WLAN Interface with gateway 192.168.30.1

No additional Routing, etc

If i want to register the accesspoint, it is not visible. (on Firewall and in Sophos Central)

Questions:

Is it the best option to configure an additional adres for WAN or is a NAT config the better way?

What im missing to get the accesspoint visible to register?

Thanks a lot!

Thorsten
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 PhilippRusch 10 months ago in reply to Thorsten User

Hello Thorsten,

can you post a network diagram?

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 10 months ago in reply to Thorsten User

Please post a copy of your wireless configuration screens.

ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Thorsten User 10 months ago in reply to rfcat_vk

there is no config...

app is reset to factory defaults and then connected to POE Switch
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 10 months ago in reply to Thorsten User

Do you have the Wireless security function enabled?

you need to create SSIDs, wireless groups. Does the PoE port show lights and activity on your switch?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 apijnappels 10 months ago in reply to Thorsten User

Thorsten User said:
On Sophos defined 4 Interfaces: WAN, LAN, WLAN and DMZ

WAN has ip 192.168.178.2 and as additional adress 192.168.50.2

LAN has 192.168.50.1

Why do you have an additional address on your WAN that is also on your LAN?

Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Cancel
Vote Up 0 Vote Down

Cancel
0 Thorsten User 10 months ago in reply to apijnappels

Because exposed host on FRITZ!Box requires a ip to send the traffic in the same lan… maybe dnat is the better solution?
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch 10 months ago in reply to apijnappels

That's one thing I do not understand as well.

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch 10 months ago in reply to Thorsten User

No, you don't need that. We have many customers using a FrittzBox, a transfer-Network and point the traffix to the WAN port of a Sophos Firewall with the "exposed host" configuration. Never used an additional IP for that.

Hope this helps.

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Thorsten User 10 months ago in reply to PhilippRusch

Thank you!

I try to setup and test it tommorow!

Thorsten
Cancel
Vote Up 0 Vote Down

Cancel