This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG IPSec Tunnel to UDM VLANs Connection Error

Hi all,

I have a working IPSec tunnel from my Sophos XG to my UniFi UDM at a remote site. I have many VLANS at the remote site. The XG can connect to the UDM default VLAN, but not any others. Does anyone have experience with this? Thanks!

This thread was automatically locked due to age.

0 Erick Jan 7 months ago

Hi Sheldon,

Thank you for reaching out to Sophos Community.

Let me ensure I understand you correctly. Only the default VLAN can access the remote site, and no other VLANs.

Are the other VLANs included in your Firewall Rule to allow them Access to the other site and vice versa?

I recommend checking the log viewer and doing a Packet Capture to verify the traffic.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sheldon Trewin 7 months ago in reply to Erick Jan

Only the default VLAN on the UniFI UDM at our remote site can access the LAN on our Sophos XG.

The Sophos XG is the "master" for the IPSec tunnel. I do have a firewall rule set up on the Sophos XG to allow the Sophos LAN to communicate with the default VLAN and VLAN 30 on the UniFi.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sheldon Trewin 7 months ago in reply to Sheldon Trewin

I should mention that in the IPSec connection settings in the XG, the only connection that succeeds is the one to the UniFI default VLAN. It will not connect to VLAN 30.
Cancel
Vote Up 0 Vote Down

Cancel