Problem between RED and XG - transmission of the voice

Additive:

The connection to the "wired" telephones works. Only the connection to the telephones, which are connected via VPN, does not work.

Hi Admin TSK,

Thanks for reaching out, and welcome to the Sophos Community! 

What is the configured RED deployment mode? 

Have you configured DoS protection or IPS on the firewall rules for the RED network? 

Thanks, 

I have to explain it a little differently again.

From the LAN (192.168.130.0) I can get into the RED network (192.168.140.0) without any problems.

My problem is that I cannot get into the RED network from the VPN network (172.168.130.0).

With a ping to 192.168.150.101, for example, "Response from 62.155.247.198: Target network cannot be reached."

However, I do not know this IP.

I have set up a firewall rule VPN - RED / RED - VPN.

However, this has not yet resulted in success.

Can you help me here?

Best wishes
Martin

Which VPN are you using?

Could you please also post a snapshot of the RED interface configuration?

It would be great if you can share a rough network diagram.

Hello,

I have attached my RED config. Unfortunately I don't have a network diagram. But it's nothing great.

I have a

1. LAN: 192.168.130.0/24
2. VPN: 172.168.130.0/24 - Sophos Connect
3. RED: 192.168.150.0/24

Everything works between LAN and VPN / RED
Not between VPN and RED.

He just doesn't know the route from 172.168.130.0 to 192.168.130.0.

Best wishes
Martin

Request to follow the steps below to check packet flow:

==> Go to Diagnostics > Packet capture

==> Enter BPF string: host 192.168.150.101 and proto ICMP

==> Start a ping to 192.168.150.101 from VPN network 172.168.130.0/24 and share packet capture snapshot.

here?

if I set this and execute a ping nothing happens ...

Start packet capture with BPF string: host 192.168.150.101 and proto ICMP as shown below.

Then, ping to 192.168.150.101 from VPN network 172.168.130.0/24 and share packet capture output.

Ok... i have do this...

The result is... no entries...

We have a second RED, with IP 192.168.140.0/24

A PC behind it has the IP 192.168.140.103

The two networks simply cannot seem to see each other.

Martin

Which VPN are you connecting to? Is it remote access VPN or site to site?

Please take packet capture on IP address to which you're testing ping connectivity. 

eg: host 192.168.150.101 and proto ICMP

or 

host 192.168.140.103 and proto ICMP

We use the Sophos Connect client.

When I send the ping from the RED network, the following appears in the log ...

When I send the ping from the VPN network and change the host to 172.168 ... nothing appears in the log ...

Can you help me?

Can you help me?

Hi there,

I just installed a RED device yesterday for a client, the scenario you described above was exactly the same issue I had.  The RED network could communicate with the client's PBX, I could ping the PBX, the phone would register & ring but no audio.

in my case...  After some diag's and packet sniffing, the issue wasn't with the RED/XG, it was the PBX.  I had to enter in the subnet of the RED device as an internal network in the PBX config.

Just a thought...  could be same issue.  Check your PBX.

In my case this client uses a FortiVoice PBX, and this setting was under Phone System - Advanced Settings - SIP - Advanced Setting - Internal Network.

André

Hello,

unfortunately this is not the same problem. I can make calls between the RED and the XG without any problems. The VPN clients can also call the clients behind the XG.

But I cannot make calls between the VPN clients and the RED clients.

That's my problem. But thanks for the help.

Martin

Hi Admin TSK,

Do you have RED to VPN and VPN to RED firewall rules configured?

If you're not using Sophos Connect with a default gateway, then please ensure that RED networks(192.168.140.0/24, 192.168.150.0/24) are added under 'Permitted network resources' in IPsec (remote access) configuration.

If these settings are already done, then I'd suggest opening a support case to get it investigated further. Also please share the case ID via PM.

Hello,

now it finally worked. The RED is missing in the VPN settings as 'Permitted network resources' Thank you for your support ...

Martin

Glad to know that an issue has been resolved.