This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bind IPSec VPN to Interface on XG Firewall

In UTM, I am able to bind a Site-to-Site IPSec VPN to a interface ("Bind tunnel to local interface" checkbox). I have a fairly unique circumstance where I need this functionality in my auto failover scenario. Having UTM's at all the sites, everything works great using this feature. My Boss just through me for a loop and told me that one of the sites is going to have an XG firewall. I need to know if there is a way to bind an IPSec tunnel on an XG Firewall to the local interface like I can in UTM and if so, will it function in the same way?

This thread was automatically locked due to age.

0 LuCar Toni over 6 years ago

XG does not have this Option right now. But you should be able to rebuild some of those scenarios in XG as well.

In fact, XG has a IPsec Interface on Kernel. Not like UTM.
Cancel
Vote Up 0 Vote Down

Cancel
0 NathanPConvergent over 6 years ago in reply to LuCar Toni

Is this Option/Feature still road mapped for version 18 of XG? I know this cant be done in UTM, but is there a way to set BGP routes to have precedence over VPN routes in XG? VPN will be a Site-to-Site IPSec link from an XG to a UTM.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to NathanPConvergent

In fact, as far as i know, there are plans for this year to do something like VTI (virtual Tunnel interfaces) for XG.

There are couple of scenarios about this BGP failover.

https://community.sophos.com/kb/en-us/131891

You can do it in XG with a simply command.

https://community.sophos.com/kb/en-us/123610
Cancel
Vote Up 0 Vote Down

Cancel