XGS2100 (SFOS 20.0.2 MR-2-Build378) - Fritzbox 7490 VPN

Hi Martin Schneider ,

Thank you for reaching out to the community, please refer the useful KBAs/Docs below:

- Sophos Firewall: IPsec troubleshooting and most common errors.
- Log files for modules.

Thanks to that hints, but could you point me to the point what was changed from 20.0.0 to 20.0.1?

And why i cant do a downgrade to 20.0.0 after installing 20.0.2. From 20.0.1 to 20.0.0 it was possible,

Thanks ahead and best regards.

Hello,

You may refer to the release note under:

https://docs.sophos.com/releasenotes/index.html

Below are the enhancement added to v20 MR 1.

The Sophos firewall holds two firmware. If you are currently on v20 MR 2, the backup firmware could be v20 MR 1 or v20 GA( You may review active and backup firmware on firmware tab).

I recommend collecting the strongswan debug logs while establishing the IPSec tunnel on non working firmware to get more clarity what's causing an issue with the tunnel establishment. 

Login to the CLI and go to option number 5 and 3 (Advance shell).

#service strongswan:debug -ds nosync

#tail -f /log/strongswan.log (Try establishing the connection and keep this command running)

Once the logs are collected, you may refer below KBA to investigate or share it with us.

https://support.sophos.com/support/s/article/KBA-000006520?language=en_US

Use the below command to disable the debug after collecting the logs.

#service strongswan:debug -ds nosync

validate the service status using below:

#service -S

Hi Martin, 

any News in this Case - i am struggling also with this Topic 

Did you get the VPN running at the 20.0.2 MR-2-378 in the meantime ?

Regards

Adamo

Hi Adamo,

which IPSEC profile are you using? Could https://support.sophos.com/support/s/article/KBA-000009744?language=en_US be the issue?

greetings,
Torsten