Installing Sophos XG v20 Firewall home edition and SETTING up ALL ports as a router

Question

Hi, I have gone through a fair bit of posts and how-to online, so I decided to post the question here, after 5 days researching this. 
 ---------------------- 
 My setup: 
 Motherboard with 1 built-in 1000mb/s ethernet port, 2x PCI-e cards HP NIC 2 ports each at 2500mb/s, 3x PCI-e cards 1 port each at 1000mb/s (totalling 8 ethernet ports) 
 Install went through completely fine, I used the recommended security settings from initial wizard. 
 What do I have now: 1 HP NIC card has the WAN port and LAN port working ok. 
 ---------------------- 
 What I don't get: all other ports are showing in the UI interface, I have tried dhcp and fixed IP under networking, also same and different masking. but I get no internet access when I plug a cable into one of them 
 ---------------------- 
 What I would like: 
 What is the simplest way, as little configuration as possible, to have all ports working, ideally in the same range as LAN1 172.16.16.16 so that I can have internet access in all 7 ports in a plug-and-play mode. 
 ---------------------- 
 I have read a lot about bridge mode, not too sure if I need that on WAN or the working LAN1. 
 Could someone kindly let me know the easiest way to achieve that? 
 
 I'll work my way up, learning this platform, it will be quite a learning curve as there's so many features inside the software that I got overwhelmed just reading to sort this initial issue. 
 Anyway thanks in advance.

JimtheITguy · Answer

Ok, simplest method would be to create a bridge of all the ports you want, I would suggest you bridge all the other ports first that are available into Br0 and then leave the first LAN port you have setup for management, that way if the system does have any issues setting up the bridge you don't end up with no access, you can then assign the bridge interface a static IP on its own range, setup a DHCP server and you should have internet access based on default rulesets

apijnappels · Answer

You should create a bridge interface (that is not the same as using Sophos in bridged mode). 
 The bridge interface is a logical interface with an IP-address and subnet mask and it binds multiple physical interfaces together. 
 If you first create your normal LAN interface from the wizard as you have already done and do not touch the other physical interfaces, then next step you can create a bridge interface where you can select all ports that need to be bridged together (I suspect you want all ports except the WAN port). 
 This way you only need 1 DHCP-server for the bridge interface and only 1 interface to setup (the bridge interface).

Installing Sophos XG v20 Firewall home edition and SETTING up ALL ports as a router

Top Replies