Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=CLI-network-configuration-interface

Interface configuration

Use this screen to configure interface settings.

Interface menu screens

The following screen shows the current network settings, such as IPv4 address/netmask and IPv6 address/prefix for all ports. In addition, If you've configured aliases, it shows the IPv4 address/netmask and IPv6 address/prefix of the aliases.

Network Settings
    Interface Name      : PortA (Physical)
    Zone Name           : LAN

    IPV4/Netmask        : 172.16.16.16/255.255.255.0 (Static)
    IPV4 Gateway        : N.A.

    Ipv6/Prefix         : Not Configured
    IPV6 Gateway        : N.A.

    Configured Aliases

    No Alias Configured

Press Enter to continue ......

Network Settings
    Interface Name      : PortB (Physical)
    Zone Name           : WAN

    IPV4/Netmask        : 10.10.10.1/255.255.192.0 (Static)
    IPV4 Gateway        : 10.10.10.254 (OK)

    Ipv6/Prefix         : Not Configured
    IPV6 Gateway        : N.A.

    Configured Aliases

    No Alias Configured

Press Enter to continue ......

Network Settings
    Interface Name      : PortC (Physical)
    Zone Name           : DMZ

    IPV4/Netmask        : 172.16.16.17/255.255.255.255 (Static)
    IPV4 Gateway        : N.A.

    Ipv6/Prefix         : Not Configured
    IPV6 Gateway        : N.A.

    Configured Aliases

    No Alias Configured

Press Enter to continue ......

Note

VLAN and WLAN interfaces aren't shown here.

Set Interface IP Address

You can set or modify the interface configuration for any port. The following example shows you how to set or modify the IPv4 address for any port. Type yand press enter.

Set IPv4 Address (y/n)  :   No  (Enter) >

The current IP address, netmask, and zone appear sequentially for each port. You can enter the new settings.

Press Enter if you don't want to change any details. The following example shows changes made to the IP address and netmask for Port C without changing its zone.

Network configuration of Ethernet PortC

    Current IP address  :   172.16.16.17
    New IP address      :   10.10.1.5
    Current Netmask     :   255.255.255.255
    New Netmask         :   255.255.255.0
    Zone                :   DMZ (DMZ)

Changing IP Address of the device ...... Done.

Note

  • The network configuration settings described above apply to gateway mode deployment only.
  • You can't configure VLAN, DHCP, PPPoE, WLAN, and WWAN settings through the CLI.
  • The steps described above are for setting or modifying IPv4 addresses only. The screen elements differ slightly for IPv6 configuration.