This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STATS on seperate subnet via ipsec

Hi guys.

Running STATS on a separate network connected via ipsec. I cannot ping/connect to the network from the router. What do I need to make this work? The networks do work. The route table doesn't list the other subnet, but that is to be expected.

This thread was automatically locked due to age.

Parents

0 FloSupport over 7 years ago

Hey HaydenKirk

Could you please clarify the issue you are experiencing? What is STATS?

Also what devices are connected via this IPsec VPN tunnel? Do you have ping enabled in your Local Service ACL's for the VPN/LAN zone? (System>Adminstration>Device Access)

What is displayed when you type from the device console (CLI option #4) "console> system ipsec_route show" ?
Cancel
Vote Up 0 Vote Down

Cancel

0 HaydenKirk over 7 years ago in reply to FloSupport

Sorry, I meant STAS.

Not sure how ping would help. I am trying to ping from the Sophos to devices in the remote subnet with no response.

Nothing is shown on the ipsec route:

console> system ipsec_route show                                                
tunnelname              host/network        netmask

0 FloSupport over 7 years ago in reply to HaydenKirk

What are you able to observe if you perform a packet capture for this traffic trying to traverse the IPsec tunnel?

What device is on the other end of this IPsec tunnel? Also what version of SFOS are you running?
Cancel
Vote Up 0 Vote Down

Cancel
0 HaydenKirk over 7 years ago in reply to FloSupport

I can't do a capture right now, but I can later on.

Other end is a bunch of servers.

Current firmware is SFOS 16.05.7 MR-7
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 7 years ago in reply to HaydenKirk

Okay keep me updated with your capture results.

From the remote side of the IPsec tunnel, are those clients able to properly traverse the tunnel and connect to clients behind the XG?
Cancel
Vote Up 0 Vote Down

Cancel
0 HaydenKirk over 7 years ago in reply to FloSupport

Correct. It's just interaction between the remote subnet and the Sophos.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 HaydenKirk over 7 years ago in reply to FloSupport

Correct. It's just interaction between the remote subnet and the Sophos.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data