Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 21 replies
  • Answers 3 answers
  • Subscribers 41 subscribers
  • Views 5150 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DHCP Configuration Issue on Sophos XG 125 Firewall

Fabien Lion

Hi all, sorry for my english, I’m french.

When adding a separate Wireless Networks for Guests, I'm having a problem with the DHCP configuration on my Sophos XG125 Firewall and I'm hoping someone can help me.

Background : I created a different SSID in Separate Zone for guest access with a Sophos XG125 Firewall in my network with Sophos APX320 access points. I also configured DHCP service.

Problem : However, the devices do not appear to receive IP addresses. There are the details of my configuration :

  • IP address range: 10.17.10.50 to 10.17.10.100
  • Subnet Mask: 255.255.255.0
  • Gateway: 10.17.10.254
  • DNS Server: 8.8.8.8

What I tried :

  • Restart the DHCP service on the Sophos.
  • Using the previous firmware (SFOS 19.5.1 MR-2-Build624)
  • Test with a different device to see if the problem persists.
  • Restore to factory configuration (but same problem with default Guest SSID).

Questions :

  1. Are there any additional settings I should check ?
  2. Are there any logs on Sophos that could help me diagnose the problem ?
  3. Is this an existing bug due to the firmware/access points ?

Problems:

  • I have SFOS 19.5.2 MR-2-Build624 firmware and I can't update it (I don’t have a valid support subscription).

Thank you in advance for your help!

SSID Settings:

DHCP Settings:



This thread was automatically locked due to age.
Parents
  • 0

    Can you show us all interfaces, you have on this hardware? 

    __________________________________________________________________________________________________________________

  • 0 in reply to Fabien Lion

    please also show this settings:

    The other thing to do is:

    login XG CLI -> 5 3

    start a tcp dump:

    tcpdump -i wlnet3 port 67 or port 68 -nvv

    then connect clients to the WiFi.

    Do you see DHCP packets arriving?

    if not, open the SSID and change it again without change.

    Test tcpdump again

  • 0 in reply to LHerzog

    Salut,

    is this a XG125"w" model or do you have an AccessPoint? If yes, which one?

    Did you already define other WiFi? Did it work before this change?

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to PhilippRusch

    Hi and thanks for your reply,

    This isn't a "W" model and I have Sophos APX320 access points. I already have a "principal" Wifi Bridge to AP LAN with an other DHCP server.
    The Sophos firewall' DHCP server has never worked in Separate Zone, but does work in an other enterprise.

    I also did a test using a DHCP relay, without success, while it works in the other company.

  • 0 in reply to LHerzog

    I tried the tcpdump command and here is the result (I canceled after 5 minutes because nothing happened):

    tcpdump: listening on wlnet3, link-type EN10MB (Ethernet), capture size 262144 bytes
    ^C
    0 packets captured
    0 packets received by filter
    0 packets dropped by kernel

    I also tried on the company network where it works and I got captures.

Reply
  • 0 in reply to LHerzog

    I tried the tcpdump command and here is the result (I canceled after 5 minutes because nothing happened):

    tcpdump: listening on wlnet3, link-type EN10MB (Ethernet), capture size 262144 bytes
    ^C
    0 packets captured
    0 packets received by filter
    0 packets dropped by kernel

    I also tried on the company network where it works and I got captures.

Children
No Data
Unfiltered HTML