IPSec SG135 (9.719-3) vs XGS2100 (SFOS 20.0.0 GA-Build222)

Very nice!

I need help setting up an IPsec tunnel between sites, the firewall models are "UTM - SG135, Firmware 9.719-3" and "XGS2100 - Firmware (SFOS 20.0.0 GA-Build222)".
We have researched through forums and followed some steps that match the errors and have not been able to solve the problem.
Attached are the bugs from both firewalls:
SG135:
ipsecstatusall

var/log/ipsec.log

XGS2100:
ipsec statusall

log/strongswan.log

Looking forward to answers, thanks!

Added TAGs
[edited by: Raphael Alganes at 10:36 AM (GMT -7) on 17 Oct 2024]

Parents

0 LuCar Toni 11 days ago

Try a RED Tunnel, then you have an interface and can route over the interface. Later, if you migrate UTM, you could move to route based IPsec.

https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/Interfaces/REDInterfaces/HowToArticles/REDCreateSiteToSiteREDTunnel/index.html

https://support.sophos.com/support/s/article/KBA-000003075?language=en_US

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 dan ghenea 10 days ago in reply to LuCar Toni

Good morning!

Temporarily we have the connection shared via SSL VPN tunnel, but what we are really interested in is to lift the connection between clients via IPsec tunnel.
Or what is the reason why the peer is not responding.

Thanks for your help.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 PhilippRusch 2 hours ago in reply to dan ghenea

Hello,

without knowing the configuration details of BOTH ends, we cannot help you.
Could you share screenshots of the edit windows of both ends with us?
You could obfuscate the private info but leave the important config parameters for a review.

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 PhilippRusch 2 hours ago in reply to dan ghenea

Hello,

without knowing the configuration details of BOTH ends, we cannot help you.
Could you share screenshots of the edit windows of both ends with us?
You could obfuscate the private info but leave the important config parameters for a review.

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data