Avaya 9600 IPSec VPN to SFOS XG 17.5

Jhirley,

follow this kb:

https://community.sophos.com/kb/en-us/123137

which is XG based.

Regards

lferrara,

Thank you for this. 

Now my VPN Clients can connect into the XG(192.168.16.1/24) Lan from my VPN ( 192.168.1.20-20) .

I have added a FW rule:

+ Sr: VPN: any HOST -  Dest: any Zone any host - * Service Accept

I have changed the default #Default_Network_Policy

~ Sr: LAN: any HOST -  Dest: WAN any host - * Service Accept

~+ Sr: LAN: any HOST -  Dest: WAN / VPN any host - * Service Accept

I can Ping 192.168.16.* from 192.168.1.20 

but I can NOT pink 192.168.1.20 from 192.168.16.1

Creare a proper lan to vpn with Nat disabled

Thank you for the tip, 

This is the final working rule set,  I had to create a Firewall rule in bound an another out bound

.

Follow up question.

Everything has been working well between the phone system and sophos, my wife's vpn phone can talk to all the local phones and to the outside world;

but recently we had to put another remote phone.  VPN connected phones can not talk to each other.

VPN subnet is 192.168.1.1-192.168.1.10 / 32

When I VPN in from a client I get an address in that range and can reach/ping the Data subnet 192.168.16.* and the voice subnet 192.168.42.*

But I am unable to ping any other VPN 192.168.1.* devices.

What would I need to enable /change on the Sophos?

Thanks