Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 461 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

S2S between Azure SFOS and FritzBox

Bob The Rock

Hi folks,

I was able to establish a connection to the firewall on Azure by reading https://community.sophos.com/sophos-xg-firewall/f/discussions/127264/vpn---site-to-site-sophos-xg-v18x---fritzbox-v7-2x. Great, works... the next step is to use the firewall in Azure as default gateway, so establish a VPN full tunnel and send all network traffic through VPN. Any suggestions? Cant find any information regarding the cfg file to change. Maybe I read over that.

Cheers,

Bob



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to Sophos Community.

    Assuming you want to route FritzBox network internet traffic from XG firewall over the IPsec VPN.

    In order to do that you need to change below parameters in IPsec tunnel.

    ==> At FritzBox, define phase2remoteid as below.

    phase2remoteid {
    ipnet {
    ipaddr = 0.0.0.0;
    mask = 0.0.0.0;
    }

    ==> At XG, define local subnet as 0.0.0.0/0. Also, add VPN to WAN firewall rule for FritzBox network.

Reply
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to Sophos Community.

    Assuming you want to route FritzBox network internet traffic from XG firewall over the IPsec VPN.

    In order to do that you need to change below parameters in IPsec tunnel.

    ==> At FritzBox, define phase2remoteid as below.

    phase2remoteid {
    ipnet {
    ipaddr = 0.0.0.0;
    mask = 0.0.0.0;
    }

    ==> At XG, define local subnet as 0.0.0.0/0. Also, add VPN to WAN firewall rule for FritzBox network.

Children
  • 0 in reply to FormerMember

    Hi Yash,

    thank you for your quick reply. Didnt work, SFOS 18.5.1, can't add network object, error message:

    You cannot enter an unspecified IP for IP address.

    In addition, I don't want to route traffic from behind the Azure Firewall to my FritzLan, I want every client in the FritzLan to use the VPN as default gateway, so full tunnel to Azure Firewall.

    Cheers,

    Bob

    EDIT: I filled object "any" to local subnet on SFOS and the connection seems to be established... but no traffic goes through the tunnel.

    EDIT2: Tried an any rule on SFOS, traffic counter still 0. Tunnel green but no traffic. May the Fritzbox is not sending traffic through the tunnel?