Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Subscribers 6 subscribers
  • Views 1286 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Second LAN not getting internet connection

nmw748

Good afternoon,

I'm hoping someone here can help me out, as I've spent the past several days researching every post I could find on this forum and several hours on the phone with tech support, all with no success.

I am currently trying to setup a second LAN connection for the students, named 'Student VLAN' (it's not technically a vlan, so ignore the name). The Sophos device I'm using is a Sophos UTM 9.707. When I connect my laptop directly into the eth0 port on the UTM, I pull the correct IP address (172.16.20.x) but can not access the internet. Below are all the screenshots of what I have currently setup.

Like I said, I've spent close to 10 hours on the phone with tech support on this, so any help would be appreciated.



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to Sophos Community.

    The configuration of interface, DHCP, masquerading & firewall rule seems ok.

    Please check the packet flow and the packetfilter.log events for 172.16.20.x/24 network.

    Assuming there is a machine located in 172.16.20.0/24 network with 172.16.20.20 IP address.

    ==> Ping 8.8.8.8 or any external IP address from 172.16.20.20 source.

    ==> Check ICMP flow for 172.16.20.20

    utm:/root # tcpdump -nei any host 172.16.20.20 and proto ICMP

    ==> Check packetfilter.log events for 172.16.20.20

    utm:/root # tail -f /var/log/packetfilter.log | grep -i "172.16.20.20"

    ==> Try to access a few websites and share session output here or in PM.

Reply
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to Sophos Community.

    The configuration of interface, DHCP, masquerading & firewall rule seems ok.

    Please check the packet flow and the packetfilter.log events for 172.16.20.x/24 network.

    Assuming there is a machine located in 172.16.20.0/24 network with 172.16.20.20 IP address.

    ==> Ping 8.8.8.8 or any external IP address from 172.16.20.20 source.

    ==> Check ICMP flow for 172.16.20.20

    utm:/root # tcpdump -nei any host 172.16.20.20 and proto ICMP

    ==> Check packetfilter.log events for 172.16.20.20

    utm:/root # tail -f /var/log/packetfilter.log | grep -i "172.16.20.20"

    ==> Try to access a few websites and share session output here or in PM.

Children
No Data
Unfiltered HTML