SFOS 17.5 and RBVPN

MichalKawecki : HI Michal, Unfortunately RBVPN is not implemented in V17.5, If you want to configure the RBVPN, you may upgrade the XG version to V18.

docs.sophos.com/.../RoutebasedVPN.html

https://www.youtube.com/watch?v=o4NB1nHBOsE

Unfortunately, this is not possible as our routers are CR-100iNG, for which there is no option to upgrade to version 18. I am looking for a solution for version 17.5. I would like to create a VTI interface mentioned in this discussion: community.sophos.com/.../xg125-sfos-v18---ipsec-tunnel---can-t- access-web-resources-at-other-side

VTI is only for V18. So you need to configure your MTU Size with this Hack in the community. Or (and i would prefer this), you access XG via Central Management ? 

Hm. We do not use central management. But could you please explain how it might help me in this situation?

You want to access the XG Webadmin, correct? 

Central Management allows you to do SSO access to the XG Firewall via Central. So you do not need to enable the access. 

Ah no, I don't have a problem with that. I only mentioned that discussion because I found your VTI suggestion there :-)

I will check your second idea for changing MTU, via iptables. Maybe it will help me speed up these ipsec connections.

iptables -t mangle -I POSTROUTING -d 192.168.190.1/32 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 900

Thanks.

You could also try to use RED site to site as a alternative.