Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is Sophos Hardware required to make VLAN work in firewall software?

Quick question:

Do you have to have Sophos Hardware to make VLAN work in the firewall software? I'm using a mini pc running Sophos Firewall V20 and it appears when I set up a VLAN, it doesn't work. Followed the directions on how to create a VLAN but I still can't connect to that specific network.

Thanks



This thread was automatically locked due to age.
Parents
  • It does not require Sophos hardware and also works on custom hardware or even virtualized.

    Once you define VLAN's you also need a managed switch to connect to the interface with the VLAN. The configured VLAN should be available as 802.1q tagged VLAN on the switchport.


    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Reply
  • It does not require Sophos hardware and also works on custom hardware or even virtualized.

    Once you define VLAN's you also need a managed switch to connect to the interface with the VLAN. The configured VLAN should be available as 802.1q tagged VLAN on the switchport.


    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Children
  • That's good it works with other hardware. So I need a layer 3 switch as my current one is layer 2. My router is also bridged with the Sophos firewall on port 2 (WAN port). Any concern with the bridge? 

  • What model of switch do you have? Some layer 2 switches are also "smart managed" meaning they can support VLANS.

    As far as needing Sophos hardware, the software version can support the same features. I have a Sophos switch (layer 2) and have set up VLANS successfully for inter-VLAN routing through the firewall between VLANS.

    How do you have your Sophos firewall connected to the router? Sophos firewall is running in bridged mode? Why not just use Sophos as the router? Just curious...

  • I have a Cisco SG200-26 (L2 switch shown below) switch. I was lead to believe that I needed a layer 3 switch to do what I wanted. Below is a good representation of what I have: The left side of main router is really 172.16.x.x and that IP range continues to Sophos Firewall, through switch to all users. The right side of main router is 192.168.x.x respectively.

    I've connected the VPN router to Sophos Firewall as well and added FW rules to support but still could not connect from my 172.16.x.x network directly to my 192.168.x.x VPN network.

    Main Router and Sophos Firewall are 'bridged' and that's a longer story but what I've got set up, works and has been for some time now....with this exception.

    So there are 2 challenges I have:

    a) setting up FW rules to support the 2 networks

    b) routing information so that each network can talk to one another

    I've also set up static routes in my main Asus router to support the routing between 172.16 and 192.168 networks and that hasn't worked either. I understand the basics here but when we start getting areas I'm unfamiliar with like VLANs or very specific FW and NAT rules, I'm taking educated guesses (after research and reading tons of how-tos) which obviously haven't worked. 

  • Hi,

    since v19 you should be able to create l2 VLANs.

    ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.