Greetings,
I am trying to setup a site-to-site VPN connection and followed the guides from Sophos. But, it keep failing. First, I have created an IPSec policy using the following configurations:
IKEv2 (Phase 1)
Key Negotiation Encryption Algorithm AES-256
Hashing Algorithm HMAC-SHA-512
Diffie-Hellman group GR14 (2048-bit) or GR20 (384-bit EC)
Negotiation Mode Main
Lifetime Measurement 86400 seconds
IKE Compression Disabled
Vendor ID Disabled
Dead Peer Detection (DPD) / IKE Keepalive Disabled
IPSec (Phase 2)
Transform Encryption + Data Integrity esp
Encryption Algorithm AES-256
Data Integrity Hashing Algorithm HMAC-SHA-512
Perfect Forward Secrecy (PFS) Enabled (GR20)
Encapsulation Mode Tunnel
Lifetime Measurement 7200 second
My policy as following:
To be more clear, the remote site information:
And my site information:
The IP 41.202.232.XXX is a public IP for my host who is going to use that IPSec connection. So, I had configured the IPSec connection as following:
Where:
- Local subnet is the local IP address of my host.
- Remote subnet which is 194.117.106.128/30
- And I am doing NATing from the local host IP address to 41.202.232.XXX
This thread was automatically locked due to age.