Sophos Firewall

Discussions VPN between XG230 units drops

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 5 replies
Subscribers 28 subscribers
Views 4070 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN between XG230 units drops

Tam Ben-Jusu over 6 years ago

1.The VPN between the two XGs drops out randomly, perhaps once a fortnight, and it certainly never comes back up after a reboot.

I have to go into VPN (both icons are green but no VPN exists), then click 'Disconnect' then 'Connect' in the VPN window.

Any advice on the IPSEC settings which should be most stable would be greatly appriecated?

This thread was automatically locked due to age.

Parents

0 HuberChristian over 6 years ago

Are both of the Firewalls configured to have static, public IP Addresses If yes, I'd suggest to configure both to "Initiate" the tunnel.
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to HuberChristian

Thanks HC,

Yes they are both static IPs and both have 'initiate connection' set.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to Tam Ben-Jusu

Can you Post screenshots of your Config of both appliances?

Do you see anything in the ipsec logs?
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to LuCar Toni

Apologies for the late response, MBP.

IPsec Policies from both sites (WP and SS) attached. Both identical and in 'main mode' not aggressive.

2627.WP IPsec Policy.pdf
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to Tam Ben-Jusu

You need to Change "alot".

Please use the preconfigured Policies instead of building own.

Would recommend to use IKEv2 Policy between two XGs. Should work fine.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 6 years ago in reply to Tam Ben-Jusu

You need to Change "alot".

Please use the preconfigured Policies instead of building own.

Would recommend to use IKEv2 Policy between two XGs. Should work fine.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data