Site to site ipsec UTM - Vodafone Station Power

Hi Danilo Boffoli 

Does Vodafone Station power support IPsec Site-to-Site VPN for IKEv1? You can find the KBA Sophos UTM: How to configure a Site to Site IPsec tunnel.

Hope this helps.

Hi,

vpn page of the vodafone station it's very sketchy. 

here is a screen:

so i have to play with the configuration of the vpn side utm

Thanks for the image. Isn't there any configuration guide to tell us what are the options or configuration available? I could not translate the image to understand what each option means.

Maybe not.

After a series of attempts and research i managed to take some steps forward but now it gives me a series of errors.

Do you have any ideas?

Thanks for the screenshots.

Would you please check for Local ID and Remote ID and Local and Remote networks in the configurations on both sides? I tried to find the default settings for Vodafone Station Power but I could not so we have to take it step by step.

utm side:

remote network is ok (192.168.7.0/24)

local network is ok (192.168.0.0/22)

psk is the same of vodafone station

IP VPN is ip address (default)

where i put remote id?

vodafone side:

remote network is ok (192.168.0.0/22)

local network is ok (192.168.7.0/24)

psk is the same of utm

remote hostname is ok (public ip of utm)

Ciao Danilo and welcome to the UTM Community!

It would be nice to see a picture of the Vodafone's settings that correspond to the Policy in UTM.

Is either of these IPsec endpoints behind a NAT?

With just a few lines, we can't see if there was an earlier hint of the problem.

1. Confirm that Debug is not enabled.
2. Disable the IPsec Connection.
3. Start the IPsec Live Log and wait for it to begin to populate.
4. Enable the IPsec Connection.
5. Copy here about 60 lines from enabling through the error.

Cheers - Bob

Ciao Danilo and welcome to the UTM Community!

It would be nice to see a picture of the Vodafone's settings that correspond to the Policy in UTM.

Is either of these IPsec endpoints behind a NAT?

With just a few lines, we can't see if there was an earlier hint of the problem.

1. Confirm that Debug is not enabled.
2. Disable the IPsec Connection.
3. Start the IPsec Live Log and wait for it to begin to populate.
4. Enable the IPsec Connection.
5. Copy here about 60 lines from enabling through the error.

Cheers - Bob