Use the network definition “Internet IPv4” and/or “Internet IPv6”.
To access the internet, I configured a rule that they can use Web Surfing protocolls to the internet. In our example I allowed Marketing and Sales network to use windows shares and make NTP and DNS lookups.
Keep in mind that you need to add marketing, sales and your servernetwork in the DHCP relay networks, otherwise no DHCP broadcast message is directed via unicast to your selected DHCP server.Īfter this you can configure firewall rules like this:Īs the most firewalls, the Sophos UTM (based on a Linux OS using iptables) is working with top-down-first-match. You can configure a DHCP Server scope within the Sophos UTM or on your primary DHCP server with DHCP relay function at the “network services”. This will be the default gateways of those networks. Now we can configure multiple “Ethernet VLAN” interfaces with a vlan tag like this (networks for marketing and sales):Īt the end of this you will see two new interfaces:
Today I will show you to replace the Cisco Router with a Sophos UTM to route between different VLANs.įirst we will connect a Sophos UTM interface (in our example eth3) with our switch environment (switch config example ). In May I posted a tutorial for running a “router on a stick” with Cisco Router, Switch and HP Switch.
0 kommentar(er)
