IPSEC Site to site conneted

Question

I Need help regarding my ipsec. I have two sites HQ and remote site. The firewall is connected through ipsec. I have set both inbound and outboud rules. 
 But am still not able to ping each end of the firewall or to remotely access resources at HQ. Kindly advice .

vamshi d · Accepted Answer

Hi Yunus Abass Ibrahim . As discussed on the DM, Traffic works fine now from IPsec pov. Below issues corrected 1) The connected LAN n/w was not in the IPsec Local/remote subnets in the HQ/BO. Added them to the IPsec Tunnel local/remote subnets. 2) Conflicting static route for the remote network removed. 3) Corrected the Firewall rule to include the connected LAN n/w. 
 
 Please check further and update.

Mayur Makvana · Answer

Hello, 
 Remove NAT (MASQ) from NAT rule ID 10. You may also use the below KBA for the reference: 
 community.sophos.com/.../sophos-firewall-how-to-identify-the-communication-issue-with-up-and-running-ipsec-tunnel

IPSEC Site to site conneted

Top Replies