Sophos Firewall: WAN link Manager

Hey Admin_Vanna ,

Thank you for reaching out to the community, It could be possible that the ISP gateway is losing the ARP of the firewall WAN IP refer the following RR - Sophos Firewall: ISP Gateway Fluctuation 


While create a firewall rule LAN to WAN, under the source network just mention the specific IP range you want to allow the internet access. 

Hi Vivek Jagad ,

Thank you for your response.

But I still could not resolve it.  Additionally, when trying to connect to Wi-Fi using mobiles, as long as password is entered correctly, it will get connected and will be able to access internet, even without static IP mapping in DHCP. I only want the devices that have IP mapping to have access to internet.

Admin_Vanna said:

But I still could not resolve it. 

Seems the issue is from ISP router 

Do the following check : 

1. Ping 8.8.8.8 from the same interface where ISP-2 is connected what is the output?

Open SSH on same time and run below command too 

console>tcpdump 'host 8.8.8.8 and proto ICMP 

2. Post failover condition set and arp ping output as per the shared kb by Vivek Jagad ,

3. Did you connect same ISP directly on Laptop and the internet was working?

Regards

Admin_Vanna said:

But I still could not resolve it. 

Seems the issue is from ISP router 

Do the following check : 

1. Ping 8.8.8.8 from the same interface where ISP-2 is connected what is the output?

Open SSH on same time and run below command too 

console>tcpdump 'host 8.8.8.8 and proto ICMP 

2. Post failover condition set and arp ping output as per the shared kb by Vivek Jagad ,

3. Did you connect same ISP directly on Laptop and the internet was working?

Regards

Thank you Bharat J .

I didn't realize the problem from ISP side. It's been running on private IP route mode network, to change it to my requirement I need to configure it Bridge mode with static IP address.

Thank you for guiding me through the process.

Hello,

you could as well use a transfer net between ISP router and your WAN2 port. Depending on the type of router you would avoid the bridging, then. I would always prefer routing over bridging.