Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 4 replies
  • Subscribers 28 subscribers
  • Views 5885 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can´t get IPSec Site to Site with Certificated between XG and UTM working

ThomasHendrich1

Hi,

I have an XG115w in Brance Office and an UTM 9.4 Cluster in Head Office.
IPSec Site to Site with XG as initiator and UTM as responder with Preshared Key is working but I can not switch to using Certificates.

I used several Articles for Site to Site with Cert between XG and Cyberoam or UTM to UTM and tried to adopt it to  XG <-> UTM but it does not work.
Tunnel is trying to establish but times out ...

Is someone running this already and can advise me?

Thanks!

Thomas



This thread was automatically locked due to age.
Parents
  • 0

    Hi Thomas,

    Are you able to activate the IPSec tunnel from XG end?

    Thanks

  • 0 in reply to sachingurung

    Hi Sachin,

    I tried multiple times but never succeded though.

    I always configured the XG to initiate the tunnel ... once I was able to activate it on the XG saw lots of messages popping up in the UTM log and all the other times I was not even able to activate the tunnel ( I think because of wrong Certificates ... )
    I followed two how-to´s I found ... one configuring IPSec Site to Site with Certs between two XGs and one configuring between two UTMs ( did this before with UTMs without any problems ).

    Do yo have Access to an howto on the Certificates, how to generate and install on both systems correctly for an XG and UTM?
    Because I think it´s kind of an certificate and trustee problem I have ... configuring that tunnel with preshared key is working fine ... 

    Thanks!

    Kind regards

    Thomas

  • 0 in reply to ThomasHendrich1

    Hi Thomas,

    I will try my hands on this scenario in the weekend. I will update you on Monday.

    Thanks for your patience.

Reply Children