10-30-2019 09:04 PM
I have a cisco sf300 switch. So I created a 4 vlans on cli mode and I had given a four static ip on vlan Those are vlan10 192 168 10 1 vlan20 192 168 20 1 so on I connected the default vlan 1 with a sophos firewall which gives a ip address 172 16 16 17 automatic So I am not getting internet access to my al vlans I was trying to change static route but I am unable to make it success. What do I do What are mistakes causing problems?
Solved! Go to Solution.
11-01-2019 08:37 AM
The Sophos needs to know about the 192.168.10.0/24 etc Subnets and you need to set a static route on the Sophos to point 192.168.10.0/24 to172.16.16.17.
One entry for each subnet.
The switch needs to have an entry like this in the forwarding table:
In your case it should have as next hop the ip address of uor sophos and as VLAn it should have VLAN1
This should be created automatically when the switch gets the IP address from the Sophos via DHCP.
11-03-2019 09:44 PM
10-31-2019 01:51 AM
sf300-24 - is a switch - the natting and routing need to take place on your router or Firewall.
you need to NAT your 192.x.x,x IP with 172.X.X
or configured Sophos to act as a router and NAT 192.X.X with your ISP Public IP address.
here is a good discussion about Sophos FW how you can achieve your requirement
11-03-2019 09:44 PM
11-01-2019 08:37 AM
The Sophos needs to know about the 192.168.10.0/24 etc Subnets and you need to set a static route on the Sophos to point 192.168.10.0/24 to172.16.16.17.
One entry for each subnet.
The switch needs to have an entry like this in the forwarding table:
In your case it should have as next hop the ip address of uor sophos and as VLAn it should have VLAN1
This should be created automatically when the switch gets the IP address from the Sophos via DHCP.
11-05-2019 10:41 PM
Nice I got yours point sir thank you very much.
One more query sir. Do need I need to do on my sophos same routing table?
I have given ip ip address like this folllowing 192.168.10.1 for vlan10 Its not correct I think. Can I give like 192.168.10.254 on cli of sf300?
2nd is I had given same routing table on the sf300 routing table but sf300 does not accept all this?
What to do?
May be this default routing is causing problems?
11-06-2019 06:57 AM
You might need to change the SF300 to "layer3" mode in systems settings.
And yes you need to add an entry on the Sophos to route all subnets to the SF300
11-06-2019 11:35 PM
Thank you Sir, I got proper solution from you. As I am new to the Cisco networking. So I need to know that What is the meaning of destination, source, next hops..
Suppose vlan 10 got 192.168.10.1 and 192.168.20.1 vlan 20 So What do I write on the
and sophos getway is 172.16.16.16 so What shall I write on routing table
Source: ?????
Destination:???????:
On SF300 destination:?????
and NextHops:??????
???=IPs .
Thank you.
11-10-2019 07:31 AM
The routing table on the Sophos needs an entry like:
On the SF300 you need
Destination Subnet 0.0.0.0 Next Hop 172.16.16.16
Vlan 10 got 192.168.10.1
VLAN 1 has IP address 172.16.16.17
Sophos Gatway is 172.16.16.16
On the Sophos you need for VLAN 10:
Destination Network 192.168.10.0 Next Hop 172.16.16.17
Best
Jo
11-19-2019 04:06 AM
11-05-2019 10:49 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide