Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 1 reply
  • Subscribers 26 subscribers
  • Views 879 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos xgs 2100 one way audio when I connect to IPsec VPN and use internal gateway VoIP

Administrator User635

Hi I just bought my Sophos XGS2100 , I have configure IPsec vpn client to site , all working good , but when my remote employee try to use his softphone all good and softphone connected to internal server through VPN connection but he cant hear anyone but the other side hear him , so please help 



This thread was automatically locked due to age.
Parents
  • +1

    Hi Administrator User635

    Please try to add your voice server IP through snat and check 

    1. On the CLI, enter 4 for Device console.

    2. Add an IPsec route from the branch office firewall to the Voice server in the head office. Enter the following:

      system ipsec_route add host <IP address of host> tunnelname <tunnel>

      Example

      system ipsec_route add host 172.16.16.17 tunnelname BO_to_HO

    3. Translate the IP address of the LAN port (Voice interface) of the branch office firewall to the Voice server's IP address at the head office. You must use this command to translate traffic generated by Sophos Firewall. Enter the following:

      set advanced-firewall sys-traffic-nat add destination <Destination IP address or network> snatip <Source IP address to translate>

      Example

      set advanced-firewall sys-traffic-nat add destination 172.16.16.17 snatip 10.10.1.1

      here 172.16.16.17  is voice server IP and 10.10.1.1 is LAN IP at BO

    "Sophos Partner: Infrassist Technologies Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • +1

    Hi Administrator User635

    Please try to add your voice server IP through snat and check 

    1. On the CLI, enter 4 for Device console.

    2. Add an IPsec route from the branch office firewall to the Voice server in the head office. Enter the following:

      system ipsec_route add host <IP address of host> tunnelname <tunnel>

      Example

      system ipsec_route add host 172.16.16.17 tunnelname BO_to_HO

    3. Translate the IP address of the LAN port (Voice interface) of the branch office firewall to the Voice server's IP address at the head office. You must use this command to translate traffic generated by Sophos Firewall. Enter the following:

      set advanced-firewall sys-traffic-nat add destination <Destination IP address or network> snatip <Source IP address to translate>

      Example

      set advanced-firewall sys-traffic-nat add destination 172.16.16.17 snatip 10.10.1.1

      here 172.16.16.17  is voice server IP and 10.10.1.1 is LAN IP at BO

    "Sophos Partner: Infrassist Technologies Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?