Sophos XGS site-to-site SSL VPN static IP address for client

VGDtech said:

Whatever I do it keeps getting leased IP address from Global DHCP pool or the VPN connection does not work.

You mean to say you are not able to reach subnet over site to site ssl vpn connection ?

Regards

Hello,

it seems the issue is with OpenVPN community version. When I check "Use static virtual IP address" and fill in the address which I would like it fails to connect with a message: ERROR: There is a clash between the --ifconfig local address and the internal DHCP server address -- both are set to XXX.XXX.XXX.XXX -- please use the --ip-win32 dynamic option to choose a different free address from the --ifconfig subnet for the internal DHCP server.

When I use OpenVPN connect I am able to connect to the VPN and I have the address which has been set. I have tried several different IPs, OpenVPN 2.6.10 or 2.6.9 fails to connect, OpenVPN connect connects with ease.

Are you connecting two different location or remote user/s with OpenVPN ?

I am connecting two different locations. I use remote VPNs for users. This one is site-to-site.

VGDtech said:

ERROR: There is a clash between the --ifconfig local address and the internal DHCP server address -- both are set to XXX.XXX.XXX.XXX -- please use the --ip-win32 dynamic option to choose a different free address from the --ifconfig subnet for the internal DHCP server

Where are you seeing this error ? Is it when connecting remote users ?

VGDtech said:

When I use OpenVPN connect I am able to connect to the VPN and I have the address which has been set. I have tried several different IPs, OpenVPN 2.6.10 or 2.6.9 fails to connect, OpenVPN connect connects with ease.

Is this observation for the remote users ?

I would suggest you to connect the two location with route base vpn if both the sites Sophos XG/S firewall is available.

Refer the link :://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SiteToSiteVPN/HowToArticles/S2sVPNRouteBasedCreate/index.html#introduction

Regards

I would suggest you to connect the two location with route base vpn if both the sites Sophos XG/S firewall is available.

Refer the link :://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SiteToSiteVPN/HowToArticles/S2sVPNRouteBasedCreate/index.html#introduction

Regards