XG IPSec Tunnel to UDM VLANs Connection Error

Hi Sheldon,

Thank you for reaching out to Sophos Community.

Let me ensure I understand you correctly. Only the default VLAN can access the remote site, and no other VLANs.

Are the other VLANs included in your Firewall Rule to allow them Access to the other site and vice versa? 

I recommend checking the log viewer and doing a Packet Capture to verify the traffic.

Hi Sheldon,

Thank you for reaching out to Sophos Community.

Let me ensure I understand you correctly. Only the default VLAN can access the remote site, and no other VLANs.

Are the other VLANs included in your Firewall Rule to allow them Access to the other site and vice versa? 

I recommend checking the log viewer and doing a Packet Capture to verify the traffic.

Only the default VLAN on the UniFI UDM at our remote site can access the LAN on our Sophos XG.

The Sophos XG is the "master"  for the IPSec tunnel. I do have a firewall rule set up on the Sophos XG to allow the Sophos LAN to communicate with the default VLAN and VLAN 30 on the UniFi.

I should mention that in the IPSec connection settings in the XG, the only connection that succeeds is the one to the UniFI default VLAN. It will not connect to VLAN 30.