This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enrutamiento entre VPN

Saludos

Se tiene dos VPN Site-To-Site (Sucursal-Central y Central-Proveedor). Se requiere comunicación entre Sucursal--Proveedor.

Describo la configuración actual:

Sophos Sucursal

VPN con Central:

Subredes Sucursal - Subredes Central y Proveedor

Políticas para este propósito:

Salida: (LAN) Subredes Sucursal - (VPN) Subredes Central y Proveedor

Entrada: (VPN) Subredes Central y Proveedor - (LAN) Subredes Sucursal

Sophos Central

VPN con Sucursal:

Subredes Central y Proveedor - Subredes Sucursal

Políticas para este propósito:

Salida: (LAN) Subredes Central - (VPN) Subredes Sucursal

Entrada: (VPN) Subredes Sucursal - (LAN) Subredes Central

VPN con Proveedor

Subredes Central y Sucursal - Subredes Proveedor

Políticas para este propósito:

Salida: (LAN) Subredes Central y Sucursal - (VPN) Subredes Proveedor

Entrada: (VPN) Subredes Proveedor - (LAN) Subredes Central y Sucursal

Se agregan las siguientes políticas en el Sophos Central con la intención de que halla comunicación entre Sucursal y Proveedor

Salida: (LAN y VPN) Subredes Sucursal - (VPN) Subredes Proveedor

Entrada: (VPN) Subredes Proveedor - (LAN y VPN) Subredes Sucursal

Sin embargo no se ha conseguido tener la comunicación deseada

Gracias de antemano por su ayuda

This thread was automatically locked due to age.

Parents

0 emmosophos over 2 years ago

Hello Yael,

Thank you for contacting the Sophos Community.

Is thee tunnel up? do you see Green for each SA?

Are the networks overlapping?

What happens if you do a TCPdump from the GUI of the XG on both of the devices at the moment you do a Ping where does the Ping goes? is it hitting the correct Firewall Rule?

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Yael López over 2 years ago in reply to emmosophos

Hi, Emmanuel

yes, all the tunnels are up
Networks do not overlap
With TCPdump I can see in the branch Sophos that the traffic goes out through an interface ipsec0 with the indicated rule, however, in the Sophos Central only the following route
Source IP: IP address of the computer located in the branch
In Interface: ipsec0

Destination IP: IP address of equipment located in Provider
Out interface: Port3

NAT ID: No Rule

From what you can see, the indicated firewall rule is not fulfilled and the desired route is not detected
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos over 2 years ago in reply to Yael López

Hello there,

Please post some screenshots of what you’re seeing and include your Firewall Rules and IPsec Configuration as well as the GUI Packet Capture.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 emmosophos over 2 years ago in reply to Yael López

Hello there,

Please post some screenshots of what you’re seeing and include your Firewall Rules and IPsec Configuration as well as the GUI Packet Capture.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data