DHCP Configuration Issue on Sophos XG 125 Firewall

I wonder if it may be due to the interface name "Invité"

Can you delete and recreate it without "´" ?

Hello,
Thanks for your quick reply.
I tried with several names, including "Guest", "Test"... But it doesn't change anything. And on another establishment with the same configuration, the name "Invité" works.
I also tried with the default "Guest" configuration of the firewall and it doesn't work.

is invite really the correct hardware? usually, the virtual interface created has the name of the SSID. The SSID is stf-guest.

Can you show us all interfaces, you have on this hardware? 

Yes, that's correct.
If needed, I have access to the ssh console...

Yes.

please also show this settings:

The other thing to do is:

login XG CLI -> 5 3

start a tcp dump:

tcpdump -i wlnet3 port 67 or port 68 -nvv

then connect clients to the WiFi.

Do you see DHCP packets arriving?

if not, open the SSID and change it again without change.

Test tcpdump again

Salut,

is this a XG125"w" model or do you have an AccessPoint? If yes, which one?

Did you already define other WiFi? Did it work before this change?

Hi and thanks for your reply,

This isn't a "W" model and I have Sophos APX320 access points. I already have a "principal" Wifi Bridge to AP LAN with an other DHCP server.
The Sophos firewall' DHCP server has never worked in Separate Zone, but does work in an other enterprise.

I also did a test using a DHCP relay, without success, while it works in the other company.

Hello,

I am considering that it is flat network without L3 in place. From Port1 - you must have switch connected and later it connects the APX. The APX must be receiving the IP addresses from the range 192.168.6.254. When we create the separate zone it creates logical interface and for which you have assigned the IP range as 10.17.10.254/24 and DHCP exist for that.

Please login to the firewall CLI and go to option number 5 and 3, and execute below commands while trying to receive the IP from DHCP in two different CLI.

#tcpdump -vvnei any port 67 or port 68

#drppkt port 67 or port 68

Kindly review if there is DHCP request on the firewall from the PCs MAC address or not.