This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Use additional address as VLAN gateway

I've got a primary LAN and a guest VLAN, and I want the guest VLAN to have a different external IP address. I've set the additional address up, as it can go through the same router as the primary one, but I can't see how I would tell the VLAN to use that address instead of the primary one.

Can anyone advise how to do this? This is on a UTM 9 appliance.

This thread was automatically locked due to age.

Top Replies

BAlfson over 2 years ago +1

Josh, is this when using a browser through Web Filtering? See How to change the outgoing interface for Web Filtering . You can then use an Additional Address for a separate Web Filtering Profile. Other…

Parents

0 Vivek Jagad over 2 years ago

Hello Josh Marchant,

Thank you for reaching out to the community, You must have a VLAN tagging switch hooked up to the UTM. At a minimum, the port connecting the UTM to the switch must be configured as a trunk port, and it must be a TAGGED member of each VLAN that you want the UTM to use.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Josh Marchant over 2 years ago in reply to Vivek Jagad

Hi Vivek,

I do have a VLAN tagging switch hooked up to the UTM via a trunk port, however I'm still not clear on how to configure which additional IP address to use as a gateway,

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to Josh Marchant

So you have created an Alias/Additional IP under Interfaces & Routing > Interfaces > Additional Addresses > for desired "On interface" And now you want to use that Alias/Additional IP as the the gateway for the Ethernet VLAN under Interfaces & Routing > Interfaces > new > type Ethernet VLAN, is that correct ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Josh Marchant over 2 years ago in reply to Vivek Jagad

That is correct yes
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to Josh Marchant

In that case , while create a VLAN:
https://support.sophos.com/support/s/article/KB-000034759?language=en_US

You have an option to to enable "IPv4 Default GW" their you can provide the gateway IP.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad over 2 years ago in reply to Josh Marchant

In that case , while create a VLAN:
https://support.sophos.com/support/s/article/KB-000034759?language=en_US

You have an option to to enable "IPv4 Default GW" their you can provide the gateway IP.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Josh Marchant over 2 years ago in reply to Vivek Jagad

I did try that, but when using that it forces the VLAN to be added to uplink balancing which isn't what I want.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to Josh Marchant

In that case Josh Marchant,

Did you check the option mentioned by BAlfson
KBA : https://support.sophos.com/support/s/article/KB-000036802?language=en_US

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Josh Marchant over 2 years ago in reply to Vivek Jagad

Unfortunately we don't use web filtering so our license does not include it. Is there no way to do this with static routes?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to Josh Marchant

Adding a manual static may help but that wouldn't be reboot persistent...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel