Unable to use the static IP in Sophos bridge mode

Question

Hello everyone, 
 I&rsquo;ve included my home network diagram and Sophos configuration below. After setting up Sophos Home (on ESXi) in bridge mode with VLANs, I assigned a static IP address of 192.168.11.10 to the bridge port. However, this IP address cannot ping the gateway (192.168.11.1), although I can access the web administrator interface from a VM using this IP. 
 I proceeded to set up the VLAN interfaces. If I use static IPs, my router (RouterOS CHR) cannot detect them or ping the gateways. I can only use DHCP. However, clients (servers, PCs, phones, etc.) can access the internet using either static IP or DHCP, and they can ping the gateway without issues (except for the management VM, cannot ping the gateway). 
 What could be wrong or missing in my configuration? 
 I&rsquo;m a newbie with Sophos and not a professional in networking, so I would greatly appreciate any help you can provide. Thank you very much! 
 Network diagram: 
 
 Bridge interface:

VLAN interfaces:

Rules config: 
 
 RouterOS DHCP and ARP table:

Mayur Makvana · Accepted Answer

Hello, 
 Thank you for contacting Sophos Community! 
 The Firewall bridge port IP (192.168.11.5) and Mikrotik router IP as 192.168.11.1. As these belongs to same range, it should be reachable without any additional configuration. 
 I suggest collecting the tcpdump on gateway IP while initiating the ping from the firewall. Login to the CLI of the firewall and go to option number 5 and 3. Use the below commands simultaneously. 
 #tcpdump -nei any host 192.168.11.1 #ping 192.168.11.1 
 We may receive number of traffic but that can be filtered. Kindly make sure that you saves the putty session output for the tcpdump command to validate each packet going out and coming in.

Anh Dung Nguyen · Answer

Updated: 
 Dear all, 
 I have found the root cause: the IP gateway addresses were incorrectly configured on RouterOS and Sophos. When I configured the bridge IP, I entered the gateway as 192.168.11.1 on Sophos. However, this IP was incorrect. I tried using 192.168.11.2 instead, and it worked. 
 
 Thanks Sophos Community, Mayur for your help. I appreciate it.

Unable to use the static IP in Sophos bridge mode

Top Replies