Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 4 replies
  • Subscribers 28 subscribers
  • Views 741 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XGS-2100 IPSec Remote Access VPN Override Hostname

Hugh D

Hello,

I have a XGS-2100 and I am using IPSec for remote access.

I am using Sophos Connect to connect PCs in via IPSec and would like to use the IPSec profile for iOS imported from the User Portal.


My problem is, my XGS-2100 sits behind another router and is NATed to from the internet via my DMZ, so the interface on my XGS-2100 that is listening for connections is the private IP address in my DMZ.

For Sophos Connect, this isn't an issue as I can override the IP address in the profile to my public one and everything still works correctly.

However when downloading the profile from the User Portal to an iOS device, it downloads the profile with the private IP address in it and I cannot seem to override this on the XGS-2100. 

SSL VPN gives me the option to globally override the IP address, however for my application I need to use IPSec.

I have tried creating an alias on my interface with my public IP address and configured the VPN to use that address, but the XGS-2100 actually starts listening on this address and ignores the other interface address, thus my NATing doesnt work for VPN.

Any ideas anyone?

Thanks 
Hugh.



This thread was automatically locked due to age.
Parents Reply Children
Unfiltered HTML