This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Subnet issue

hello,

i have two ip subnet on port-1 Lan interface (Vlan), the host pc can able to ping the Firewall Gw ip but from FIrewall to Host ping not work, i checked the Local windows firewall its already turned off.

Now 100.0/22 subnet not reach to 15.0/24 subnet

i created a Rule like Source LAN SOurce Netwrk (15.0/24)
Destination LAN Destination Network ANY Services ANY

Port1
LAN

Physical

Connected
1000 Mbps - Full Duplex
Auto-negotiated

192.168.100.19/255.255.252.0
Static

Hardware: Port1



Gal
LAN

VLAN

N/A
N/A

192.168.15.19/255.255.255.0
Static

Hardware: Port1.15

VLAN ID: 15

This thread was automatically locked due to age.

Top Replies

rfcat_vk 10 months ago +1 suggested

Hi, you need a reverse rule as well. Ian

0 rfcat_vk 10 months ago

Hi,

you need a reverse rule as well.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 feroz syed 10 months ago in reply to rfcat_vk

Now Firewall able to reach the Host.

But Subnet 192.168.100.0/22 not able to ping 192.168.15.0/24
Cancel
Vote Up 0 Vote Down

Cancel
0 feroz syed 10 months ago in reply to rfcat_vk
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos 10 months ago in reply to feroz syed

Hello there,

Adding to what Rfcat suggested, I would recommend you to do a PCAP in the outgoing interface of the port where the traffic is not replying so on the Port where 192.168.15.0 is configured, if you see the traffic arriving at the Port from 192.168.100.0/22 and being send out, check the Local Firewall of the computer.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 10 months ago

Hi,

there is an easier firewall rule setup. Source zone LAN, Network any, destination zone LAN, network any, all services, allow and log. Place the rule at the top of tour list. As well that setup is a little more secure than using source zone of ANY.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel