Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Static IP for Sophos Firewall

Hello dear community!

I would like to clarify few dummy things.

During configuring my terminal station into firewall router (steps as per 'tutorial': https://www.youtube.com/watch?v=YGR9_kmPlig&t=451s) I've encountered issue as was unable to connect to 172.16.16.16:4444

Investigating topic I've discovered that my network service provider do not support static IP addresses as:

IP addresses for Netia's internet services are dynamically assigned. 
This means that even each disconnection will result in the assignment of a different (currently free) IP address from a specific address pool.


Entering the configuration manually is unnecessary and at the same time impossible,
because the address assigned from Netia has a shortened /32 mask (255.255.255.255), i.e. it is one host address, not a subnet.

From my newbie understanding when I turning off DHCP server I will need static IP address to access web and because I am unable to use one I cannot access 172.16.16.16:4444.

I can obtain static IP from my network service provider but before doing so I would like to somehow confirm that is the root cause.

Please share yours thoughts and confirm if obtaining static IP from NSP is a good step forward.



This thread was automatically locked due to age.
  • Hi,

    you are confusing two issues.

    1/. The IP address you are quoting is for your internal network and uses aDHCP server to assign addresses to connecting devices.

    2/. The WAN interface can have either static or dynamic addressing. You will disable the DHCP function on your wan interfaces when you click assign static address. 

    3/. the servers on each interface are independent in the default setup.

    Ian

    XG115W - v20.0.3 MR-3 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • Hi,
    Thanks for answer!

    So in big simplification those two matters it looks like below?

    WAN <-- dynamically assigned IP by NSP --> Router <--- DHCP which I am disabling ---> other devices

    So to access 172.16.16.16:4444 after disabling local DHCP should I also add IP address of my terminal station with sophos to DHCP Static IP configuration in LAN configuration on router? Please refer below

  • Why are you disabling the XG internal DHCP server? 

    Ian

    XG115W - v20.0.3 MR-3 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.