DHCP requests not routing over IPSEC

Question

I have a DHCP server running at head office on 192.168.100.21 which is a Windows Server that has a Sophos as it's gateway 
 The branch office has a Sophos 
 There is an IPSEC tunnel between the two Sophos units 
 The branch office has a DHCP relay pointing to the head office server 192.168.100.21 
 I've setup SNAT and IPSEC routes 
 The DHCP server isn't responding to the requests across the IPSEC 
 What am I missing?

LuCar Toni · Accepted Answer

Update: This is supported in SFOSv21.0: Sophos Firewall v21 Early Access Announcement

Stuart James · Answer

The Sophos is not the DHCP server, therefore the system dhcp lease-over-IPSEC command is irrelevant 
 I've got the traffic flowing to the server now - I stupidly had made an error in the tunnelname in the CLI for the ipsec_route 
 However DHCP still not working - but that's a Windows issue now.

Hardik_R · Answer

Hello Stuart James The configuration looks alright and as per the DHCP server behind HO firewall and BO firewall as relay agent

If DHCP server is not responding then you may check with server and validate whether DHCP requests are hitting on server or not. also verify if there is windows firewall dropping those request.

DHCP requests not routing over IPSEC

Top Replies