{"id":993,"date":"2019-06-20T15:00:34","date_gmt":"2019-06-20T18:00:34","guid":{"rendered":"http:\/\/www.bfnetworks.com.br\/?p=993"},"modified":"2023-01-15T19:20:36","modified_gmt":"2023-01-15T22:20:36","slug":"failover-sophos-xg","status":"publish","type":"post","link":"https:\/\/bfnetworks.com.br\/failover-sophos-xg\/","title":{"rendered":"FAILOVER &#8211; SOPHOS XG"},"content":{"rendered":"\n<h3>INFO<\/h3>\n\n\n<p><em>Vers\u00e3o do firewall Sophos XG:&nbsp;<strong>SFOS 17.0.6 MR-6<\/strong><\/em><\/p>\n\n\n<h3>CONFIGURANDO FAILOVER<\/h3>\n\n\n<h5>1. VERIFICANDO ZONAS EXISTENTES<\/h5>\n\n\n<p>As interface s\u00e3o geralmente associadas a uma zona. Precisamos inicialmente definir uma zona para as interfaces de internet, no meu caso defini a zona com nome WAN, ela ser\u00e1 configurada em cada interface que seja WAN (por default essa zona j\u00e1 deveria existir).<\/p>\n\n\n<p>Caso ainda n\u00e3o tenha ou deseja criar outra especifica adicione uma nova seguindo os passos abaixo:<\/p>\n\n\n<ol><li>Clique em <strong>Network <\/strong>no painel lateral esquerdo;<\/li><li>Depois aba <strong>Zones<\/strong>;<\/li><li>Em seguida clique em <strong>Add <\/strong>para adicionar;<\/li><\/ol>\n\n\n<figure class=\"is-layout-flex wp-block-gallery-1 wp-block-gallery columns-1 is-cropped\"><ul class=\"blocks-gallery-grid\"><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" loading=\"lazy\" width=\"1060\" height=\"358\" src=\"https:\/\/i1.wp.com\/www.bfnetworks.com.br\/wp-content\/uploads\/2020\/02\/ZONAS-1.png?fit=980%2C331\" alt=\"\" data-id=\"1183\" data-full-url=\"https:\/\/i1.wp.com\/www.bfnetworks.com.br\/wp-content\/uploads\/2020\/02\/ZONAS-1.png?fit=1060%2C358\" data-link=\"http:\/\/www.bfnetworks.com.br\/failover-sophos-xg\/zonas-1-2\/\" class=\"wp-image-1183\" srcset=\"https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2020\/02\/ZONAS-1.png 1060w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2020\/02\/ZONAS-1-300x101.png 300w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2020\/02\/ZONAS-1-1024x346.png 1024w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2020\/02\/ZONAS-1-768x259.png 768w\" sizes=\"(max-width: 1060px) 100vw, 1060px\" \/><\/figure><\/li><\/ul><\/figure>\n\n\n<p>Preencha os campos de acordo com sua necessidade, a maioria dos campos s\u00e3o opcionais. N\u00e3o vou entrar em detalhes pois vou usar a j\u00e1 existente por padr\u00e3o.<\/p>\n\n\n<h5>2. PREPARANDO INTERFACES<\/h5>\n\n\n<p>Para configurar as interfaces, siga os passos abaixo:<\/p>\n\n\n<ol><li>Clique em <strong>Network <\/strong>no painel lateral esquerdo;<\/li><li>Depois aba <strong>Interfaces<\/strong>;<\/li><li>Em seguida clique no nome da porta para edita-la, no meu caso <strong>Port3<\/strong>;<\/li><\/ol>\n\n\n<figure class=\"is-layout-flex wp-block-gallery-3 wp-block-gallery columns-1 is-cropped\"><ul class=\"blocks-gallery-grid\"><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" loading=\"lazy\" width=\"960\" height=\"431\" src=\"http:\/\/168.138.149.254\/wp-content\/uploads\/2019\/11\/INTERFACES.png\" alt=\"\" data-id=\"994\" data-link=\"http:\/\/www.bfnetworks.com.br\/?attachment_id=994\" class=\"wp-image-994\" srcset=\"https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/INTERFACES.png 960w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/INTERFACES-300x135.png 300w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/INTERFACES-768x345.png 768w\" sizes=\"(max-width: 960px) 100vw, 960px\" \/><\/figure><\/li><\/ul><\/figure>\n\n\n<p>Na janela seguinte preencha os campos informados abaixo:<\/p>\n\n\n<ol><li><strong>Network Zone<\/strong>: defina a zona, neste caso WAN;<\/li><li><strong>IP Assigment<\/strong>: especifique se ser\u00e1 static<strong>, <\/strong>PPPoE ou DHCP; <ol><li>Se definir <strong>static <\/strong>preencha os campos: <strong>IPv4<\/strong> e<strong> Netmask<\/strong>;<\/li><\/ol><ol><li>Caso defina <strong>PPPoE  <\/strong>surgir\u00e3o os campos login e senha, preencha;<\/li><li>Caso defina <strong>DHCP<\/strong>, n\u00e3o ser\u00e1 necess\u00e1rio ajustar mais nada, apenas o campo Gateway Name;<\/li><\/ol><\/li><li><strong>Gateway Name<\/strong>: defina um nome para o gateway;<\/li><li><strong>Gateway IP<\/strong>: Se escolheu <strong>static <\/strong>defina neste campo o IP do seu roteador de sa\u00edda da rede(gateway);<\/li><\/ol>\n\n\n<figure class=\"is-layout-flex wp-block-gallery-5 wp-block-gallery columns-1 is-cropped\"><ul class=\"blocks-gallery-grid\"><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" loading=\"lazy\" width=\"917\" height=\"367\" src=\"http:\/\/168.138.149.254\/wp-content\/uploads\/2019\/11\/image-2.png\" alt=\"\" data-id=\"1000\" data-link=\"http:\/\/www.bfnetworks.com.br\/?attachment_id=1000\" class=\"wp-image-1000\" srcset=\"https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/image-2.png 917w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/image-2-300x120.png 300w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/image-2-768x307.png 768w\" sizes=\"(max-width: 917px) 100vw, 917px\" \/><\/figure><\/li><\/ul><\/figure>\n\n\n<p>Fa\u00e7a isso para as duas interfaces que ser\u00e3o usadas como links de internet.<\/p>\n\n\n<h4>3. AJUSTANDO GATEWAYS<\/h4>\n\n\n<ul><li><strong>CONFIGURANDO LINK PRINCIPAL<\/strong><\/li><\/ul>\n\n\n<p>Considerando o gateway de nome <strong>GW1 <\/strong>meu link1 e o <strong>GW2 <\/strong>o link2 que ser\u00e1 de Backup, caso o Link1 fique indispon\u00edvel o Link2 assuma. Siga os passos abaixo para alterar o GW1:<\/p>\n\n\n<ol><li> Clique em <strong>Routing <\/strong>no painel lateral esquerdo;<\/li><li>Depois aba <strong>Gateways<\/strong>; <\/li><li>Clique no <strong>nome <\/strong>para editar seu gateway, meu caso GW_1;<\/li><\/ol>\n\n\n<figure class=\"is-layout-flex wp-block-gallery-7 wp-block-gallery columns-1 is-cropped\"><ul class=\"blocks-gallery-grid\"><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" loading=\"lazy\" width=\"967\" height=\"260\" src=\"http:\/\/168.138.149.254\/wp-content\/uploads\/2019\/11\/GWs.png\" alt=\"\" data-id=\"1032\" data-link=\"http:\/\/www.bfnetworks.com.br\/failover-sophos-xg\/gws\/\" class=\"wp-image-1032\" srcset=\"https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/GWs.png 967w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/GWs-300x81.png 300w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/GWs-768x206.png 768w\" sizes=\"(max-width: 967px) 100vw, 967px\" \/><\/figure><\/li><\/ul><\/figure>\n\n\n<p>Na janela seguinte na sess\u00e3o <strong>Gateway Detail<\/strong>, altere o campo <strong>Type <\/strong>para <strong>Active<\/strong> e clique em <strong>Save<\/strong>.<\/p>\n\n\n<figure class=\"is-layout-flex wp-block-gallery-9 wp-block-gallery columns-1 is-cropped\"><ul class=\"blocks-gallery-grid\"><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" loading=\"lazy\" width=\"610\" height=\"304\" src=\"http:\/\/168.138.149.254\/wp-content\/uploads\/2019\/11\/GW2.png\" alt=\"\" data-id=\"1004\" data-link=\"http:\/\/www.bfnetworks.com.br\/?attachment_id=1004\" class=\"wp-image-1004\" srcset=\"https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/GW2.png 610w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/GW2-300x150.png 300w\" sizes=\"(max-width: 610px) 100vw, 610px\" \/><\/figure><\/li><\/ul><\/figure>\n\n\n<p>Ainda na janela de edi\u00e7\u00e3o do Gateway GW1, mais abaixo na janela ter\u00e1 a sess\u00e3o <strong>Failover Rules<\/strong>, clique em <strong>ADD <\/strong>para adicionarmos condi\u00e7\u00f5es de troca de link caso este Link1 venha a ficar indispon\u00edvel. Como abaixo:<\/p>\n\n\n<figure class=\"is-layout-flex wp-block-gallery-11 wp-block-gallery columns-1 is-cropped\"><ul class=\"blocks-gallery-grid\"><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" loading=\"lazy\" width=\"329\" height=\"176\" src=\"http:\/\/168.138.149.254\/wp-content\/uploads\/2019\/11\/image-4.png\" alt=\"\" data-id=\"1009\" data-link=\"http:\/\/www.bfnetworks.com.br\/?attachment_id=1009\" class=\"wp-image-1009\" srcset=\"https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/image-4.png 329w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/image-4-300x160.png 300w\" sizes=\"(max-width: 329px) 100vw, 329px\" \/><\/figure><\/li><\/ul><\/figure>\n\n\n<p>Nesse campo est\u00e1 as condi\u00e7\u00f5es de troca de Links, em resumo se definir como coloque abaixo ele ficar\u00e1 &#8220;pingando&#8221; para o host <strong>8.8.8.8<\/strong> E tamb\u00e9m o <strong>208.67.222.222<\/strong>, caso os dois fiquem dispon\u00edveis \u00e9 porque provavelmente o link ficou offline de fato, logo ele trocar\u00e1 para o Link2 de backup(se existir outro gateway no caso, ainda n\u00e3o configuramos Link2).<\/p>\n\n\n<figure class=\"is-layout-flex wp-block-gallery-13 wp-block-gallery columns-1 is-cropped\"><ul class=\"blocks-gallery-grid\"><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" loading=\"lazy\" width=\"940\" height=\"148\" src=\"http:\/\/168.138.149.254\/wp-content\/uploads\/2019\/11\/image-5.png\" alt=\"\" data-id=\"1010\" data-link=\"http:\/\/www.bfnetworks.com.br\/?attachment_id=1010\" class=\"wp-image-1010\" srcset=\"https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/image-5.png 940w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/image-5-300x47.png 300w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2019\/11\/image-5-768x121.png 768w\" sizes=\"(max-width: 940px) 100vw, 940px\" \/><\/figure><\/li><\/ul><\/figure>\n\n\n<pre>Obs.: Perceba que a condi\u00e7\u00e3o AND \u00e9 importante aqui, voc\u00ea pode colocar OR, mas acredito que AND se encaixa melhor. Se for OR basta um dos hosts informados no campo acima ficar indispon\u00edvel ele ir\u00e1 trocar para o Link2.<\/pre>\n\n\n<p>Teste outras op\u00e7\u00f5es, pode usar al\u00e9m de PING tamb\u00e9m o TCP.<\/p>\n\n\n<p>Aplicado e salvado esses ajustes o GW1 est\u00e1 pronto para trabalhar como principal.<\/p>\n\n\n<ul><li> <strong>CONFIGURANDO LINK SECUND\u00c1RIO<\/strong><\/li><\/ul>\n\n\n<p>Para alterar o <strong>GW2 <\/strong>para trabalhar como secund\u00e1rio basta editar da mesma forma como o GW acima, definindo apenas o campo <strong>Type <\/strong>para <strong>Backup<\/strong>.<\/p>\n\n\n<h3>FONTES<\/h3>\n\n\n<p><a href=\"https:\/\/community.sophos.com\/kb\/en-us\/126185\">https:\/\/community.sophos.com\/kb\/en-us\/126185<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>INFO Vers\u00e3o do firewall Sophos XG:&nbsp;SFOS 17.0.6 MR-6 CONFIGURANDO FAILOVER 1. VERIFICANDO ZONAS EXISTENTES As interface s\u00e3o geralmente associadas a uma zona. Precisamos inicialmente definir uma zona para as interfaces de internet, no meu caso defini a zona com nome WAN, ela ser\u00e1 configurada em cada interface que seja WAN (por default essa zona j\u00e1 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[6,8,27,15],"tags":[58,80,133],"_links":{"self":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/posts\/993"}],"collection":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/comments?post=993"}],"version-history":[{"count":1,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/posts\/993\/revisions"}],"predecessor-version":[{"id":1859,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/posts\/993\/revisions\/1859"}],"wp:attachment":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/media?parent=993"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/categories?post=993"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/tags?post=993"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}