Site to Site VPN with Draytek Router

Question

Hi Guys, 
 Can anyone tell me how to configure IPsec VPN between Draytek and Sophos xg. I already create the IPSec policy and the connection but VPN is not established. I double-checked the Phase 1 and 2 parameters with the guy who configured the Draytek router, the phase 1 and 2 parameters are fine. 
 In the Draytek router, he configured the Dial-out VPN not a site to site

Vishal_R · Answer

Hi Tharindu Premarathne I am not able to get exact configuration steps of Draytek with Sophos XG however I found below URL which is for Dytrek and Cyberoam and may help you to match up some of the settings on router end.

https://www.draytek.com/support/knowledge-base/5201

If settings are fine at both the end then you may check the TCPDUMP on remote end gateway IP over XG and you may check the strongswan service logs to confirm more.

Sophos XG Firewall: Where to find log files?

support.sophos.com/.../KB-000038142

Noel Slevin · Answer

I have a number of DrayTek routers set up this way. I find it works much better if the DrayTek dials the connection and the XG is set to respond only. Might seem a daft question, but I've seen colleagues tripped up by this before they realised... is the connection set as active (green light) in the XG in the VPN section?

Site to Site VPN with Draytek Router

Top Replies