This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Routing for Internet Setup

Hi all,

I have a Sophos SG135w which used to be for the work office, but we have moved and no longer require it. It was previously setup by the work MSP who we purchased the device from. It has been sitting idle for about 18 months now and I am going to set it up at home. I've got it working on a home license.

I have it connected to my modem/router which works on 192.168.20.40 on 1 interface. I have another interface configured for DHCP as I want the Sophos to control that (192.168.0.0/24).

Now the Sophos isn't running all DHCP yet, I have it connected on its on. When I am my desktop on 192.168.20.0/24 I can connect to 192.168.20.40. When I am connected to the Sophos on 192.168.0.0/24 I can connect to the Sophos of 192.168.0.1.

But, I have no internet connectivity. I suspect I need to do a route somehow? Or a DNS configure? Just not sure where I need to do any of this stuff and googling hasn't given me the answer.

Any tips or pointers would be great.

Thanks.



This thread was automatically locked due to age.
Parents
  • Hi ,

    Thank you for reaching out to the Community! 

    Could you please share the screenshot of the network interfaces configured on your UTM? 

    Did you configure the DHCP server on the internal interface? You can add DNS servers under Network services > DNS > Forwarders. You also need to add the internal network under DNS > Global > Allowed Network. 

    Did you configure the firewall rule for internet access and SNAT? Could you please share the screenshots with us?

    Thanks,

     

     
    Harsh Patel (H_Patel)

    Community Support Engineer | Sophos Technical Support
    Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' button.

  • Hi H_Patel,

    See screenshots below:

    Let me know if you need anything else! Appreciate the prompt reply.

  • You need several things to get this flying.

    You say „modem“ but having a transfer network 192.168.20.0/24 indicates you are having a router.

    That router has to know about the net behind the Sophos, either by setting up a route or by setting up what is called an „exposed host“.

    Then, you need to „Masquerade“ that internal net behind the Sophos to your uplink connecting to the router.

    Third you have to allow DNS usage to the clients of your internal net.

    Mit freundlichem Gruß, Regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.

  • Hopefully this makes sense?

    You say „modem“ but having a transfer network 192.168.20.0/24 indicates you are having a router.

    Correct, I said "modem/router". I want the Sophos to do all the network routing though, so the modem/router will only have 1 device connected being the Sophos which will be 192.168.20.40

    That router has to know about the net behind the Sophos, either by setting up a route or by setting up what is called an „exposed host“.

    It is Internet > Modem/Router provided by ISP > Sophos > All other devices (Wireless/LAN)

    ======================================================================================================

    How is this now?

Reply Children
No Data