Sophos XG over Proxmox, VLANs?

Yes, I have it in use with no problems in my home setup (with smart managed Netgear switches). What's your issue?

Jeez, I just typed out the whole issue only to have it flagged for abuse.

I'll try without screenshots as I think its the link that flags it.

I'll add them if I can post this.

__________________________

Basically what I said was...

Awesome, I was beginning to lose hope!

Do you mind sharing your configurations?

I can't get it to work no matter what how-to guides I follow or ideas I try. Most people throw in the towel at this point I think and the documentation isn't very good for this use case. It seems like once people get the issue solved they disappear without showing setup. I was about to try ESXi after this before going a completely different route. I really like Sophos XG, once understood it's easy to use for how extensive it is. It's more like an AIO than other at-home solutions. I'm really hoping to get this sorted so I can keep using Sophos how I am.

My current setup is ISP > Intel-225V, SFF PC, Proxmox w/ Sophos XG VM, XG-C100C > Netgear MS510TXM > local net

I'll leave my setup alone for now until I hear from you. I want to focus on VLAN 211 for this.

Here are pics of my configs,

Proxmox Network devices:

Sophos VM config:

Sophos XG Network config:

Sophos DHCP for VLAN 211:

PVID config of switch:

mg2 is the nic of the device I want on 211, mg4 is the port to Sophos, everything else can be set to whatever is necessary.

Thank you

Don't create the VLAN interface at Proxmox.

Create the VLAN "211" at "Port1" on Sophos Firewall.

What's happening right now is that you created a VLAN (Sophos Firewall) inside another VLAN (Proxmox vmbr2 interface).

As an example: At Sophos Firewall I have two VLAN's, one for Guest and another for IoT at "vmbr0"

But on Proxmox I have them setup without any VLAN's, only as bridges for the physical interfaces.

vmbr0 = "Wired - Auth".

PS; Use the Interfaces at Proxmox as "Physical Interfaces"(Only create the necessary bridges to use on the VM), leave VLAN's and everything else on Sophos Firewall.

Thanks for clearing that up. I had been doing this in the beginning but I must be missing something still.

Here is my current setup.

New Proxmox:

New Sophos VM:

Sophos Ports/VLANs:

Sophos DHCP:

Can you double check on my VM setup that the Network Devices are the same setup as yours?

If this all looks good then perhaps I have the switch to deal with.

The Sophos VM pics doubled up for some reason. They're one in the same.

The Sophos VM pics doubled up for some reason. They're one in the same.