Multiple VPN IPSec access configurations

Question

I am a newbie with Sophos firewalls having a XGS138 to configure and a Zyxel USG100Flex to migrate the configuration from. 
 One of the things I was not yet able to solve is how to configure the following remote client accesses together via VPN: 
 
 1. IPSec IKEv2 using a certificate for Win 11 clients and mobile phones (Samsung, iPhone) 
 2. L2TP over IPSec (IKE v1) for a Synology NAS 
 
 My current understanding is that I can have only 1 IPSec configuration with 1 profile (meaning either the one for IKEv2 or IKE v1). I tried to add the NAS connection separately under L2TP, but this hasn't been successfull so far. The online help doesn't provide any guidance either. 
 Is there any hands-on documentation how to solve the issue?

Mayur Makvana · Answer

Hello Rolf, 
 Thank you for contacting Sophos Community! 
 You may review the below video and KBA: 
 https://techvids.sophos.com/watch/F6J2svQYYBxvpCDnjhY8JA 
 https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/RemoteAccessVPN/IPsecSSL/IPsec/index.html 
 
 For L2TP, you can refer to the below KBA: 
 https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/RemoteAccessVPN/L2TP/index.html 
 We don't have specific KBA to configure VPN with the certificate instead of Preshared key.

Multiple VPN IPSec access configurations

Top Replies