This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Do I modify existing or delete/add External (WAN) Interface with new Internet provider?

Greetings Sophos UTM Community,

This is my first post and I'd like to ask a basic question.

We are switching Internet providers for our small business, Cable to Fiber. I have a Sophos SG-210 firewall.

My question is do I modify the existing External (WAN) interface to reflect new ISP IP public address, subnet, and gateway? Or just delete existing, add a new one with the information the ISP provided, and reboot?

Any help provided would be very much appreciated.

 

 



This thread was automatically locked due to age.
Parents
  • i mostly reconfigure existing interface.

    Only if i have to use booth providers for some time (while migrating ISP) i create a new IF and delete the old afterwards.

     


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • As long as you do not absolutely want the boxes interfaces named right (i mean the description under the ports of the hardware box) e.g. LAN/WAN i would use a new HW interface and leave the old one untouched till the new connection works fine, then delete the old one.

    By disabling/enabling the "default gateway" checkbox you can easily shift between the both lines. I would not recommend enabling two gateways/uplink balancing/multipath in a temporary behaviour.

    If the names are important for you you can - when the old connection is no longer needed - delete this one, change the HW interface of the new connection to eth1 and un-/replug your external cable in the right port.

    If you edit an existing interface you have to care about the advanced settings, too if your new connection needs e.g. other MTU.

    Gruß / Regards,

    Kevin
    Sophos CE/CA (XG+UTM), Gold Partner

Reply
  • As long as you do not absolutely want the boxes interfaces named right (i mean the description under the ports of the hardware box) e.g. LAN/WAN i would use a new HW interface and leave the old one untouched till the new connection works fine, then delete the old one.

    By disabling/enabling the "default gateway" checkbox you can easily shift between the both lines. I would not recommend enabling two gateways/uplink balancing/multipath in a temporary behaviour.

    If the names are important for you you can - when the old connection is no longer needed - delete this one, change the HW interface of the new connection to eth1 and un-/replug your external cable in the right port.

    If you edit an existing interface you have to care about the advanced settings, too if your new connection needs e.g. other MTU.

    Gruß / Regards,

    Kevin
    Sophos CE/CA (XG+UTM), Gold Partner

Children
  • Thank you! I think this time I will just modify existing interface if that's all I need to do. I thought that possibly creating a new interface each time was maybe a best practice... that it would update the software properly and I won't have to worry about bugs later from taking a short-cut. :)

  • Hi, Sean, and welcome to the UTM Community!

    Sachin's prescription is the best practice.  Off to the right of your interface definition, you will see a blue button - proess on that and you will see all of the things you would have to massage if you were to create a new interface definition.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA