VPN SITE TO SITE

Hey Patricio Gómez ,

Thank you for reaching out to the community, can you also share the IPsec settings for the remote site too ?

Ola Patricio,

at first glance I notice the remote gateway having a private IP address "192.168.1.2". This is strange.

If you reach this remote net really by that IP, you wouldn't need a VPN.

HI @Patricio Gómez,

this below highlighted must be a remote public ip please double check on both side

Yes look this is the part of the other firewall that I am making the connection

Hi  Patricio Gómez 

1. You can use * instead of 192.168.1.2 under Remote gateway and make sure you upstream ISP router has forwarded IPSec VPN ports for 192.168.1.2.

Best practice is to use DDNS for a remote gateway

2. Configure local id type and remote-id type at both the end properly.

3. Try to update the firmware version to the latest Sophos Firewall v20 is Now Available

4.Please hide Public Static IP from above post screenshots

Regards 

At this site where 192.168.1.2 is local there is likely a router in front with 192.168.1.1 (guess).

This router in front should either port forward all IPSEC ports to your firewall at 192.168.1.2 or it should forward all traffic to 192.168.1.2.

Then in that same site browse to a site like whatsmyip dot com to check the public IP-address for that site and enter this information on the remote site instead of 192.168.1.2 which you have configured now.

Hi,

Thank you for reaching out to Sophos Community.

I've edited your reply and hidden the public IP.

I suggest that , too:  this site seems to have a router in front with that 192.168.1.0 /24 net as transfer network.

Easiest would be to find out, which public IP is given to that router and use that in your site-to-site definition.

This is in addition to what apijnappels already said