VPN

Hi Fadi_Hamamdeh

Please forward all the ports for IP 192.168.1.2 on your dsl router or you can configure dsl router in bridge mode to get static public IP on Sophos XG.

To configure IPSec site to site VPN with other company follow the below link and share the Branch office VPN Policy to other side of the company with remote and local subnet details 

https://support.sophos.com/support/s/article/KB-000036746?language=en_US 

Regards

thanx,

after configure dsl router in bridge mode, wan ip for sophos xg is 192.168.1.2?

when configure vpn site to site I use Local gateway is 192.168.1.2?

Wan ip will be whatever was on the router or maybe even a new address issued by your isp dhcp server.

ian

Hello Fadi,

if you have access to your ISP router (means you have a pasword and can login to administrate this device), then I would prefer routing instead of bridging. You have to define what is called an "exposed hosts" to pass the packets from outside to the Sophos firewall. The 192.168.1.0/24 is yourr transfer network, then. The VPN-definition takes the public IP from your ISP in this config as well.

If your ISP-router is not manageable by you (aka "black box"), you would need to go with bridging.

This way, your firewall "WAN" port gets the same IP address as your ISP-router and acts like if it is directly connected to the internet.

thanx,

ISP-router is not manageable, i will configure similar picture attachedhttps://ibb.co/7Q2PhtD

thanx,

ISP-router is not manageable, i will configure similar picture attachedhttps://ibb.co/7Q2PhtD

Hi Fadi_Hamamdeh

Snapshot is not clear as well as link is not working you have shared

Regards

hi, 

Hi Fadi_Hamamdeh

Yes this will work make sure port 500,4500 UDP/TCP and ESP protocol is allowed from 192.168.1.1 in case tunnel is not getting up

To  check IPsec troubleshooting and most common errors follow the below link : 

https://support.sophos.com/support/s/article/KB-000038566?language=en_US

Thanks and Regards