XGS 108 in combination with Asus Router

Hello,

Your current setup up should work:  ISP modem --> XGS WAN port. XGS LAN Port --> ASUS WAN port. ASUS LAN ports --> Raspberry, other devices

I assume the Asus router would NAT traffic going to -> Sophos Firewall so when filtering/FW rules etc. you might see 1 Natted IP only. but connectivity-wise they should function. 

If your Asus router can do L2/bridge then connect all your wired devices to it (It can be the DHCP or the Sophos Firewall) as long as it doesn't do NAT or L3 functions (to simplify your setup and configuration) -> Then connect it to your Sophos Firewall (This is where you NAT going to-> ISP modem router and SF will also be the DG) It seems this way that you have control and visibility over your network devices when creating your FW policies. 

Hope this helps with your home setup.

Regards,

Hello,

Your current setup up should work:  ISP modem --> XGS WAN port. XGS LAN Port --> ASUS WAN port. ASUS LAN ports --> Raspberry, other devices

I assume the Asus router would NAT traffic going to -> Sophos Firewall so when filtering/FW rules etc. you might see 1 Natted IP only. but connectivity-wise they should function. 

If your Asus router can do L2/bridge then connect all your wired devices to it (It can be the DHCP or the Sophos Firewall) as long as it doesn't do NAT or L3 functions (to simplify your setup and configuration) -> Then connect it to your Sophos Firewall (This is where you NAT going to-> ISP modem router and SF will also be the DG) It seems this way that you have control and visibility over your network devices when creating your FW policies. 

Hope this helps with your home setup.

Regards,

Hi Raphael,

thanks for the prompt reply. I believe I partly understood your post. To make things more tangible for me, my ASUS router can either operate in Router or AP-mode. In AP-Mode, it does not manage DHCP, so, as I understand your post, AP-mode would presumably be the "bridge" mode, right? In the manual of ASUS, it says that: AiMesh Routers in AP mode connect to a wireless router through an Ethernet cable to extend the wireless signal to other network clients. In this mode, the firewall, IP sharing, and NAT functions are disabled by default.

So, the XGS would then do DHCP? Which brings me to my next question, which mode I need to select in the XGS setup. It would then be the Router Mode, correct? and which Network settings do I then set in the XGS? Same as now, meaning, an IP in the range of 192.168.1.xxx and 255.255.255.0 subnet or something else? and which IP for the gateway? The 192.168.100.1 of my ISP modem or the 192.168.1.1 that my ASUS currently has? And how would you do the set-up, right now, I have my XGS connected to one of the ports on my ISP modem and one of the ports of ASUS. Should I do the set-up like this and only later change it to the setup you mentioned or should I set it up already in the one you mentioned (potentially risking not being able to connect to the XGS anymore because the ASUS might be in the AP mode then or the XGS might switch networks (since, as I understood it, the XGS defaults to a different IP segment than 192.168.1.xxx)

Thank you!

In case anyone comes across this in the future:

I kicked out the ASUS/merely use it as an AP right now. XGS does the DHCP and Raspberry (running Home Assistant/AdGuard) is plugged into the XGS and serving as an DNS.

My physical layout looks like this: ISP/Modem ---> LAN Cable to the XGS WAN Port --->LAN Cable from XGS LAN port to ASUS Router WAN port

I first set up the DHCP on the XGS and then put the ASUS in the AP mode, then replugged the cables in the above mentioned order.

I set all ports in the XGS as a bridge so they all have LAN access and then made a rule so that the XGS allows LAN traffic between these ports (important to access the Raspberry).