Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions IS there a way connect FritzBox(behind NAT) via ipsec to XG ?

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 5 replies
Subscribers 41 subscribers
Views 1369 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IS there a way connect FritzBox(behind NAT) via ipsec to XG ?

n33dfull over 4 years ago

Hi,

I habe some trouble with remote Office.

Some years Ago i was able to connect FritzBox with IKEv1 to XG

But now i cant chose the IPsec Policy because of XG answering in GW Mode is disbled with IKEv1

Dies anybody have a running config like below:

XG with PPPoE = Headquarter (Static IP)

FritzBox with PPPoE (Dynamic IP)--> Exposed host to another FritzBox for IPsec Site-2-Site

FritzBox initiate the IPsec Tunnel to XG

Or any other cheap routers are welcome...

Regards

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 4 years ago

Hi,

please review this link.

https://community.sophos.com/kb/en-us/127997

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 n33dfull over 4 years ago in reply to rfcat_vk

Hi,

the initiator is the FritzBox not the XG Device.

And I don't know if Fritz Box can handle IKEv2...

Regards
Cancel
Vote Up 0 Vote Down

Cancel
+1 Peter-Paul Gras over 4 years ago in reply to n33dfull

AFAIK Fritzbox doesn't support IKEv2.

Have you tried defining your own IKEv1 IPsec policy (VPN -> IPsec Policies)?

Grtz, Peter-Paul

SFVH (SFOS 20.0.0 GA-Build222) - Last (re)boot on November 6th 2023

Asus H410i-plus - Pentium 6605 Gold - 250GB M.2 PCIe NVMe SSD - 8GB - 3 ports

[If any of my posts are helpful to you please use the 'Verify Answer' link]
Cancel
Vote Up 0 Vote Down

Cancel
0 n33dfull over 4 years ago in reply to Peter-Paul Gras

Hi,

yes i already created a IPSec Policy with IKEv1, but I'm not able to use it in answering mode(can't chosse the policy).

is there Something i can change that the answering mode of XG is able to use DH2 in IKE3v and answering mode?

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 n33dfull over 4 years ago in reply to Peter-Paul Gras

IKEv1 is not Supported with DH2 and answering mode.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 n33dfull over 4 years ago in reply to Peter-Paul Gras

IKEv1 is not Supported with DH2 and answering mode.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data