Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

1 ISP WAN, 18 ISP LAN addresses - how to I setup a port for an edge router to go out ISP LAN IP

We have 1 WAN IP from our ISP

18 LAN IPs from the ISP

Current setup is one CAT6 from ISP to Sophos Firewall. Firewall has the 1 WAN IP interface setup for internet

We need a port enabled for on the firewall for a Vendor router to use one of the LAN IPs from the ISP.

We want all of this traffic separate from our network.

What is the best way to go about this?

Thank you in advance!



This thread was automatically locked due to age.
Parents Reply Children
  • Hi   what you are trying to do is a transparent subnet gateway. The XG can do it, but it's not as clean as other vendors do it. Here is the link. https://support.sophos.com/support/s/article/KB-000035920?language=en_US

    Option 2, and the easiest solution, would be to put a small switch in between your ISP handoff and your Sophos Firewall. You can then let your vendor plug into the small switch as well and use a public IP (LAN IP) from your ISP block they have assigned you.

    In either case of using transparent subnets or using a small switch, the traffic would be separated. 

    Also, ISP's call them LAN IP's, but they are WAN IP's 99% of the time. They just refer to them as LAN because they are typically assigned to the LAN interface of the CPE device they install. They are LAN in the big picture to them, but are WAN to you since that would be your public IP block, unless they use CGNAT, which is another topic.

    Let me know if you need anymore help.

    Thanks,

    Michael

  • I would go with option 2 as well. Cleanest setup. No specials in the firewall needed.

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.

  • Hi Michael. Really appreciate the reply!! Solves the questions I had.

    Thanks,

    Austin