VPN

Question

Dears, 
 I have DSL router (source internet) and i have (fixed public ip), and xg firewall. 
 i want create vpn site to site from our side to other side(company). 
 How I can create vpn from our side to other side. but our source internet from dsl router (connection between dsl router and xg firewall is private IP). 
 ip dsl router 192.168.1.1/24 
 ip firewall 192.168.1.2/24 
 i have fixed public ip when connect to internet from isp 
 
 regards,

jprusch · Answer

Hello Fadi, 
 if you have access to your ISP router (means you have a pasword and can login to administrate this device), then I would prefer routing instead of bridging. You have to define what is called an "exposed hosts" to pass the packets from outside to the Sophos firewall. The 192.168.1.0/24 is yourr transfer network, then. The VPN-definition takes the public IP from your ISP in this config as well. 
 If your ISP-router is not manageable by you (aka "black box"), you would need to go with bridging. 
 This way, your firewall "WAN" port gets the same IP address as your ISP-router and acts like if it is directly connected to the internet.