I have (and need) two public IP addresses via my residential cable connection running as a bridge which hosts my lab personal environment. I'm a recent convert from pfSense so still learning my way around the Sophos XG and am more familiar with Cisco routers and switches. I understand this would be an edge case as this situation would be uncommon for enterprise deployments. The Sophos XG in my environment runs as a VM on ESXi with a dedicated non-addressable VLAN and port group for the internet. The testing i am carrying out presently requires additional services to be presented on the same port as the client software does not allow for changing the expected port. Initially i tried adding a second interface which picked up an address but caused the WAN connection to flap between the either interface as they use the same gateway. I have since discovered that this is intended behavior on Sophos XG and the correct method is to use an Alias on the WAN interface. Unfortunately i cannot find a way to create an Alias via the GUI that is configured for DHCP. It possible to force an Alias to use DHCP via command line? I've seen this mentioned in the UTM forums and also in the XG forums but never solved.
↧