Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bridge interface is not working with vlan

Dear Team,

We have to add two interface as a bridge - like A1 and A2 with sub interfaces (Vlan interface).

Below are the configuration steps which I had created yesterday for bridge interfaces-

1. Created Zone (Common ZONE)

2. having created Zone, added vlan in ZONE

3. after that I added port A1,A2 in bridge interface with Common ZONE.

Communication was not happing.

As I think there will be no policy required for bridge interface.

Even though I had gone through below documents but couldn't understand properly. Is there anyone who share any article or scenario with an example.

https://doc.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/Interfaces/NetworkBridgeInterfaces/index.html 

Thank you.



This thread was automatically locked due to age.
Parents
  • In a bridge you will need firewall rules to allow traffic to travel from one port to the other (and back). So make sure to allow traffic using a firewall rule something like:

    source: common zone
    destination: common zone
    service: any (or be more restrictive if necessary)
    Allow


    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Reply
  • In a bridge you will need firewall rules to allow traffic to travel from one port to the other (and back). So make sure to allow traffic using a firewall rule something like:

    source: common zone
    destination: common zone
    service: any (or be more restrictive if necessary)
    Allow


    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Children
No Data