IPSec VPN over Interface without a default gateway

Question

Hello Community, 
 I need to create an IPsec Tunnel over a routed Network. For the Firewall it is a normal Interface without a default gateway. So, I can't select this interface as local gateway in the IPsec configuration. We have a MPLS line between to Sophos XG firewalls and want to secure this Connection with an IPsec Tunnel. 
 In the past we used a RED-Tunnel over the MPLS line, but the Tunnel and OSPF become very unstable, and we are not able to work over this line. 
 Has anybody an idea how to configure the IPsec Tunnel? 
 Thanks, 
 
 Ben

Vishal_R · Accepted Answer

Hi Ben, Another way is to terminate both the side MPLS line over XG as in WAN Interface with WAN type backup. So it will not serve Internet traffic and your Internet traffic will be routed via an actual WAN ISP over the respective XG.

Once you will set the MPLS as in WAN you will get the same in the local interface in IPsec configuration settings and as both the side XG is already reachable with each other via this MPLS, you may be able to establish IPSec.

Vivek Jagad · Answer

Hello Ben, Thank you for reaching out to the community, please find the useful KBA: https://support.sophos.com/support/s/article/KB-000035833?language=en_US

IPSec VPN over Interface without a default gateway

Top Replies

Submitted a Tech Support Case lately from the Support Portal?