Hello,
I am experiencing strange behavior when I use the Ipsec Type Tunnel Interface.
When using it, the Ipsec Tunnel is established, but traffic originated from Sophos XG it seems does not work as expected.
Im getting this error when I try ping the other peer from sophos XG
SFVUNL_VM01_SFOS 18.0.0 GA-Build379.HF052220.1# ping -i 10.1.1.2 10.1.1.1
PING 10.1.1.1 (10.1.1.1) from 10.1.1.2: 56 data bytes
ping: sendto: Operation not permitted
SFVUNL_VM01_SFOS 18.0.0 GA-Build379.HF052220.1#
But If I ping from other peer (10.1.1.1) to Sophos XG (10.1.1.2) it works.
Branch office peer
console> ping sourceip 10.1.1.1 10.1.1.2
PING 10.1.1.2 (10.1.1.2) from 10.1.1.1: 56 data bytes
64 bytes from 10.1.1.2: seq=0 ttl=64 time=16.139 ms
64 bytes from 10.1.1.2: seq=1 ttl=64 time=15.928 ms
64 bytes from 10.1.1.2: seq=2 ttl=64 time=16.029 ms
64 bytes from 10.1.1.2: seq=3 ttl=64 time=15.912 ms
64 bytes from 10.1.1.2: seq=4 ttl=64 time=15.963 ms
Tcpdump from sophos side
SFVUNL_VM01_SFOS 18.0.0 GA-Build379.HF052220.1# tcpdump -i any host 10.1.1.1
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
14:37:31.142553 xfrm1, IN: IP 10.1.1.1 > 10.1.1.2: ICMP echo request, id 7715, seq 6, length 6414:37:31.142587 xfrm1, OUT: IP 10.1.1.2 > 10.1.1.1: ICMP echo reply, id 7715, seq 6, length 64
14:37:32.147421 xfrm1, IN: IP 10.1.1.1 > 10.1.1.2: ICMP echo request, id 7715, seq 7, length 6414:37:32.147452 xfrm1, OUT: IP 10.1.1.2 > 10.1.1.1: ICMP echo reply, id 7715, seq 7, length 64
14:37:33.156394 xfrm1, IN: IP 10.1.1.1 > 10.1.1.2: ICMP echo request, id 7715, seq 8, length 6414:37:33.156421 xfrm1, OUT: IP 10.1.1.2 > 10.1.1.1: ICMP echo reply, id 7715, seq 8, length 64
14:37:34.161357 xfrm1, IN: IP 10.1.1.1 > 10.1.1.2: ICMP echo request, id 7715, seq 9, length 6414:37:34.161387 xfrm1, OUT: IP 10.1.1.2 > 10.1.1.1: ICMP echo reply, id 7715, seq 9, length 6
Ipsec Connection from sophos Side
Interface Ip address
COuld someone has any tip about it ?
Regards
Carlos
This thread was automatically locked due to age.
