SSL VPN Multiple Gateways Oder

RE: SSL VPN Multiple Gateways Oder

RTW IT — Mon, 18 Nov 2024 21:53:58 GMT

Sorry folks,

I should have read more carefully the link Toni posted concerning the leases. I corrected the entries and now the "Ovewrwrite Hostname" works.

Thank you

RE: SSL VPN Multiple Gateways Oder

LuCar Toni — Mon, 18 Nov 2024 21:08:23 GMT

Yes - We need a screenshot of your override hostname.
You likely cannot save it because of my link above.

RE: SSL VPN Multiple Gateways Oder

RTW IT — Mon, 18 Nov 2024 21:07:41 GMT

Screenshot from what settings? I posted the Port5 Settings already to Stephen. Everything is running, my only problem is: the Port5 GW is not the 1st one in the .ovpn file and the "Override Hostname" gives an error as described

RE: SSL VPN Multiple Gateways Oder

LuCar Toni — Mon, 18 Nov 2024 20:15:27 GMT

Can you show us your screenshot of your settings?

RE: SSL VPN Multiple Gateways Oder

RTW IT — Mon, 18 Nov 2024 19:43:39 GMT

Hi Stephen,

maybe the Problem is with our static IP Addr/Network:

Port5 is listed in Configure.Network as

IPv4/Netmask: 91.25.215.250/29

Gateway IP: 91.25.215.249

Neither .250 (external) nor .249 (internal) is working

RE: SSL VPN Multiple Gateways Oder

RTW IT — Mon, 18 Nov 2024 19:42:08 GMT

Sorry, but this is for ipv4 leases and has nothing to do with our problem

RE: SSL VPN Multiple Gateways Oder

LuCar Toni — Mon, 18 Nov 2024 08:09:23 GMT

This is an old issue: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/132121/sophos-firewall-ssl-vpn-ipv4-lease-range-changes-or-global-settings-update-gives-error-you-must-enter-a-network-ip-address-in-sfos-v19

RE: SSL VPN Multiple Gateways Oder

Stephen BabuJohnson — Mon, 18 Nov 2024 03:15:13 GMT

Hi,

Thanks for the detail and you don't need to put the gateway ip address and need to put the Port 5 interface IP address only. It is working for us when we do that.

Or Please share your network interface page / SSL VPN global settings page as screenshot, if you want.

RE: SSL VPN Multiple Gateways Oder

RTW IT — Sun, 17 Nov 2024 22:05:31 GMT

Hi Stephen,

yes, I already tried the "Override Hostname" Option. If I use our Gateway static IP Address, I always get an error: "You must enter a network IP Address"

RE: SSL VPN Multiple Gateways Oder

LuCar Toni — Sun, 17 Nov 2024 18:39:28 GMT

You can install V21.0 via Update File: https://support.sophos.com/support/s/article/KB-000043162?language=en_US

Or you follow the advise from Stephen BabuJohnson

RE: SSL VPN Multiple Gateways Oder

Stephen BabuJohnson — Sun, 17 Nov 2024 18:26:31 GMT

Hi,

You can use the 'Override Hostname' option under 'show vpn settings' . You can specify your Port5 Public Static IP there and import the configuration in your Sophos Connect Client. This will solve your problem..Please note that all your existing SSL VPN connections may affect by doing this..

RE: SSL VPN Multiple Gateways Oder

RTW IT — Sun, 17 Nov 2024 15:00:28 GMT

When is V21.0 available for XG?

Since we have a static Address and no DDNS provider (we dont need one), we cannot create a record.

RE: SSL VPN Multiple Gateways Oder

LuCar Toni — Sun, 17 Nov 2024 09:02:21 GMT

Essentially we are using the Port Order in SFOS. In V21.0, we are using the Interface name order. So you could change this order.

Or you can simply create a DDNS record, this one will be used instead of interfaces.