This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN

Hi All

I have sophos xg 210 firewall and configure site to site ipsec vpn and working fine however, the status goes to red after some minute and i have to go and click the red button inorder to change to green why does that happen and how can i fix it? i use PRTG network tool and the prtg shows the site is down.

This thread was automatically locked due to age.

Parents

0 Keyur over 5 years ago

Hi Ihenock

Verify that the "Action on VPN Restart" for the branch office is set to "Initiate" and for the Head office it is set to "Respond only".
Cancel
Vote Up 0 Vote Down

Cancel
0 Ihenock over 5 years ago in reply to Keyur

Yea i already made that
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 5 years ago in reply to Ihenock

Hi Ihenock

Please go to the IPsec VPN policy you are using in the configuration from VPN >> IPSec Policies >> Select Policy >> Dead peer Detection >> When Peer unreachable >> Re-initiate
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Keyur over 5 years ago in reply to Ihenock

Hi Ihenock

Please go to the IPsec VPN policy you are using in the configuration from VPN >> IPSec Policies >> Select Policy >> Dead peer Detection >> When Peer unreachable >> Re-initiate
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Ihenock over 5 years ago in reply to Keyur

HQ site Sophos is respond only if i choose re-initiate does it initiate a traffic?
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 5 years ago in reply to Ihenock

Hi Ihenock

It should be select where the action on vpn restart set as an initiate. When connectivity is not there, you can check the IPSec logs.

show vpn IPSec-logs from Device console throuh SSH access
Cancel
Vote Up 0 Vote Down

Cancel
0 Ihenock over 5 years ago in reply to Keyur

Hi Keyur

What is the result if i make HQ initiate trafic and branch sites to respond only?
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 5 years ago in reply to Ihenock

Hi Ihenock

You can modify as per your requirement, there are no specific settings for HO and BO so you can change them as per the requirement.
Cancel
Vote Up 0 Vote Down

Cancel