How to create IPSec Tunnel from BO having two Gateways

Question

Hi, 
 Can anyone provide me with a proper article that can help to create IPSEC Tunnel from a Branch Office having 2 gateways. The head office has only one gateway. 
 Thanks.

FormerMember · Answer

Hi CreateShare , 
 Thank you for reaching out to the Community! 
 Check out the following KBA for more info: 
 
 Sophos XG Firewall: How to configure an IPsec VPN failover with multiple connections 
 
 Thanks,

FormerMember · Answer

Hi CreateShare , 
 Thank you for the update. 
 You would have to configure two IPsec tunnels at both firewalls and then configure the failover group and failover condition. For the IPsec, failover group to work correctly, both the tunnels need to connect without any issue. 
 Once you configure the fail-over group and define failover conditions, the firewall will check the peer gateway status. If it does not get the response, it'll declare the peer gateway as dead, and it&rsquo;ll failover to another connection. Could you please check if ICMP and TCP port is allowed on the peer firewall? 
 Thanks,

How to create IPSec Tunnel from BO having two Gateways

Top Replies