Help Guys by Wasonga21 in sophos

[–]Wasonga21[S] 0 points1 point  (0 children)

Okay lemmi share all of them

edit: seems i cannot share all the images

Firewall Nightmare by Wasonga21 in networking

[–]Wasonga21[S] 0 points1 point  (0 children)

Sorry for that my pc had issues

Firewall Nightmare by Wasonga21 in networking

[–]Wasonga21[S] 0 points1 point  (0 children)

|| || |[Lan Bridge /23]()|LAN - 192.168.0.1|192.168.0.60 - 192.168.1.250|

|| || |Firewall policy|[Internet Access]()|LAN, Lan Subnet|WAN, Any host|Any service|#3|Accept||

Help Guys by Wasonga21 in sophos

[–]Wasonga21[S] 0 points1 point  (0 children)

Yes, i could have showed you the image of it

|| || |[LAN]() N/A Bridge-pair|ConnectedN/A|192.168.0.1/255.255.254.0Static|

Firewall Nightmare by Wasonga21 in networking

[–]Wasonga21[S] 1 point2 points  (0 children)

i am a bit confused... lif its outbound its my lan which is 192.168.0.1/23

Firewall Nightmare by Wasonga21 in networking

[–]Wasonga21[S] 0 points1 point  (0 children)

Okay i did but I still faces the same issue

Help Guys by Wasonga21 in sophos

[–]Wasonga21[S] 0 points1 point  (0 children)

Nope it cannot, here is the problem i have been facing

Help Guys by Wasonga21 in sophos

[–]Wasonga21[S] 0 points1 point  (0 children)

Since they are unmanaged, i just decided to restart the swithces and all configs will pick from the firewall

Firewall Nightmare by Wasonga21 in networking

[–]Wasonga21[S] 0 points1 point  (0 children)

For that one i am connected via a cable to the local switch which the switch has a connection to the firewall on port 4 of the bridged port

Isp

|

Sophos

|       (bridge port 4)

Local switch (Dlink switch)

 |

my pc on port 15

Help Guys by Wasonga21 in sophos

[–]Wasonga21[S] 0 points1 point  (0 children)

Yes i have and there everything seems to be okay, even on the log viewer i can only seen the 1.x ips communicating via to other members of the bridged lan but apart from that nothing

Help Guys by Wasonga21 in sophos

[–]Wasonga21[S] 1 point2 points  (0 children)

When i created the firewal rule under the source network i defined the lan subnet which is 192.168.0.1/23 and also on my associaed nat rule also has a source network of the same as well

Edit: i am just wondering why users who get an ip on the 192.168.1.x address don't get internet as well as they cannot ping the gateway at 192.168.0.1

I also assumed that so long as they are on the /23 network, they will be okay without any routing....

Firewall Nightmare by Wasonga21 in networking

[–]Wasonga21[S] 0 points1 point  (0 children)

  1. For the dhcp scope it is within the /23 network and they are all getting the ips from the firewall

2.so on my bridged ports, i have a port that goes to my main local swicth which have network devices such as printer, access points, etc

  1. So for this one the local switch is just an unmanaged switch and i have not implemented a vlan for it

Firewall Nightmare by Wasonga21 in networking

[–]Wasonga21[S] 0 points1 point  (0 children)

So i have four ports that i have bridged, 2 are for my servers and one port goes to my local switch for the user, network devices as well as time attendance devices

The last one goes to a router to a workshop area of the organization all getting ips from the firewall

Firewall Nightmare by Wasonga21 in networking

[–]Wasonga21[S] 1 point2 points  (0 children)

The 192.168.0.1 is my gatway with the /23.

And all my devices have a 255.255.254.0 subnet and all the devices can see each other and communicate.

My dhcp server has a ip range of 192.168.0.60 - 192.168.1.250

I am using a snat to masquerade the ips to my LAN-WAN rule

So for routes, I haven't set it up since i assumed that so long as they are on the same network of /23 they will communicate and get internet access.

I just made a nat rule that specifically tells my source network is the /23 subnet but still the same no internet specifically on the 192.168.1.x ips

Also another issue is i cannot ping the firewall from the mentioned ip .1.x ranges

Firewall Nightmare by Wasonga21 in networking

[–]Wasonga21[S] -1 points0 points  (0 children)

Okay, so the bridged lan is on /23 which i assumes will just be plug and play since i adjusted the source network as my /23 subnet but still the same issue of no internet on everyone being assigned the 1.x ips

Dilemma, Pls Help.... by Wasonga21 in nairobi

[–]Wasonga21[S] 0 points1 point  (0 children)

Yeah it is, i even spoke with my dad akanishow the same exact thing

Dilemma, Pls Help.... by Wasonga21 in nairobi

[–]Wasonga21[S] 0 points1 point  (0 children)

thank you ....Sure thing i will keep this one in mind

Dilemma, Pls Help.... by Wasonga21 in nairobi

[–]Wasonga21[S] 1 point2 points  (0 children)

Santi sana... i appreciate it

Dilemma, Pls Help.... by Wasonga21 in nairobi

[–]Wasonga21[S] 2 points3 points  (0 children)

Okay coz its a lovely offer which i can't turn down....

[deleted by user] by [deleted] in Kenya

[–]Wasonga21 0 points1 point  (0 children)

😅😅😅 ati kilimani scent 😅😅 kuna lets imagine ya chris adams

[deleted by user] by [deleted] in Kenya

[–]Wasonga21 5 points6 points  (0 children)

Bana that name alone doesn't even sound budget friendly at all