Configured WAN lP in Sophos XGS136, link is up but internet is not working

Configured one more WAN IP in the Sophos XGS136, link is up but traffic is not moving through new link, checked load balancing, everything is looking fine

Pervious link is working fine, however the new link is not working, able to ping 8.8.8.8 from the interface

please help on this issue

Added TAGs
[edited by: Raphael Alganes at 10:17 AM (GMT -7) on 7 Oct 2024]

Parents

0 Vivek Jagad 2 hours ago

Hi Firewall Monitoring ,

Thank you for reaching out to the community, please refer - Sophos Firewall: How to Choose The Gateway For A Firewall Rule v19 - Recommended Reads - Sophos Firewall - Sophos Community

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 Firewall Monitoring 2 hours ago in reply to Vivek Jagad

Unable to open the link
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 2 hours ago in reply to Firewall Monitoring

try opening this - community.sophos.com/.../sophos-firewall-how-to-choose-the-gateway-for-a-firewall-rule-v19

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 2 hours ago in reply to Firewall Monitoring

Thanks Vivek,

Just to informing you that, we have created a policy for LAN to WAN, previous link is working on the same policy
I think do not need to add one more policy for the new link, it will work on the existing policy only
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 2 hours ago in reply to Firewall Monitoring

But if you would like to opt and utilize the other link for certain users, then SD-WAN gateway rule would definitely help !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Vivek Jagad 2 hours ago in reply to Firewall Monitoring

But if you would like to opt and utilize the other link for certain users, then SD-WAN gateway rule would definitely help !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 Firewall Monitoring 1 hour ago in reply to Vivek Jagad

Configured SDWAN as well but still the issue is not resolved, traffic is moving only with previous link
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 hour ago in reply to Firewall Monitoring

Can you show us screenshots of your config?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 hour ago in reply to LuCar Toni
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 hour ago in reply to Firewall Monitoring

Which is the new line? Right now, SFOS will use TATA for everthing, as it is the "first available gateway".

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 hour ago in reply to LuCar Toni

TTSL is the new line, Can I change the priority here?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 hour ago in reply to Firewall Monitoring

You can reorder it in the SD-WAN Profile.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 hour ago in reply to LuCar Toni

update the SDWAN profile- but no change
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 hour ago in reply to Firewall Monitoring

Are both gateways online in SFOS under Gateways?

Are you seeing traffic counter on the Sd_WAN rule itself? If not, it is not being applied.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 hour ago in reply to LuCar Toni

Yes Both gateways are online and I can see the traffic count on the SDWAN rule
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 hour ago in reply to Firewall Monitoring

Then new connections should be routed to the new line.

How can you be sure, it is not being used?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel