This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LACP from ISP to Active/Passive

Lakkappa Aras 10 months ago

Dear All,

Could you help me to configure this architecture in XG 86 Firewall.

This thread was automatically locked due to age.

Top Replies

MichaelBolton 10 months ago in reply to Lakkappa Aras +1 suggested

Lakkappa Aras you cannot make this scenario work as you have it drawn. You would need managed layer 3 switches that form a cluster or virtual chassis to make this work. The XG's would also need to be in…

0 apijnappels 10 months ago

Where exactly would you like to get help? Have you read the documentation from Sophos and get stuck somewhere?

Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte 10 months ago

LACP is not usable in this scenario.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 10 months ago

Hello apijnappels ,

Thank you for reaching out to the community, please refer the useful KBAs below:
1.) Configure LAG in HA.
2.) Additionally, Configure access layer switches for XGS HA.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Lakkappa Aras 10 months ago in reply to Vivek Jagad

Vivek Jagad thanks for your replay, but I did not find solution.

I want configure redundant LAN link for each switches from two firewalls, I haven't found any solution for that, kindly help me for this.

This is our network architecture for reference.

Regards,

Lakkappa Aras
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelBolton 10 months ago in reply to Lakkappa Aras

Lakkappa Aras you cannot make this scenario work as you have it drawn. You would need managed layer 3 switches that form a cluster or virtual chassis to make this work. The XG's would also need to be in HA as well. You would then link the virtual chassis switches to the XG's using LAG interfaces.
Cancel
Vote Up +1 Vote Down

Cancel