Sophos Routing precedence through IPsec Tunnel

Hi Maximilian Porzelt
 
Please refer to below link for the same configuration 

https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContents/CreatingSiteToSiteIPsecVPN.html \

The above link is policy based IPSec VPN hence no need to add static route 

Make sure local and remote subnet/s are added which are required to communicate with each other.

Thanks and Regards 

Hi Bharat J

Thanks for your reply.

I have already configured the IPSec VPN as mentioned. But I can not reach the VPN Site (192.168.0.0/22) as long as Port 3 (192.168.1.0/24) is connected. When I disconnect Port 3 and set Port 3 config to none, it works.

So how can I tell my Sophos Firewall to route traffic over the IPSec VPN instead of Port 3?

Hi Bharat J

Thanks for your reply.

I have already configured the IPSec VPN as mentioned. But I can not reach the VPN Site (192.168.0.0/22) as long as Port 3 (192.168.1.0/24) is connected. When I disconnect Port 3 and set Port 3 config to none, it works.

So how can I tell my Sophos Firewall to route traffic over the IPSec VPN instead of Port 3?

Hi Maximilian Porzelt

Please check the below link to Configure NAT over IPsec VPN for overlapping subnets : 

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/SiteToSiteVPN/VPNConfigureSiteToSiteIPsecNAT/index.html

Head office : 

Branch office : 

I am able to reach with NATed subnet as per the shared link 

Thanks and Regards