Guest User!
You are not Sophos Staff.
Hi, this is the scheme of the network that needs to configure. Gateway devices are brand SOPHOS XG / Cyberoam (old name of Company)
scheme of the network DOWNLOAD
The problems that I have are:
1. What protocol to use when failure the IPSec Site to site VPN connection over the Internet traffic to pass through the dark optic ?
HI StilianLazarov,
I will assume that you have SFOS on both devices and Dark Optic is your backup to your IPsec VPN .
Configuration .
Step 1:IPsec VPN site to site between the two . (Any algorithm is feasible).
Step 2: Create a Gateway by going to Configure > Routing > Gateway > Add >Gateway IP <The Peer end> , Interface <Local >
Step 3: Create a Policy Routing , Configure > Routing > Policy Routing .
Step 4: Set Route Precedense , VPN>Policy>Static {Your Choice of sequence}.
Command in Console> system route_precedence set vpn policyroute static
Do the same on both end and If you VPN is UP , it would route through VPN tunnel and the same for Fibre connection.
Make sure you have Rules to allow to each zones applies for both incoming and Outgoing .
HI StilianLazarov,
I will assume that you have SFOS on both devices and Dark Optic is your backup to your IPsec VPN .
Configuration .
Step 1:IPsec VPN site to site between the two . (Any algorithm is feasible).
Step 2: Create a Gateway by going to Configure > Routing > Gateway > Add >Gateway IP <The Peer end> , Interface <Local >
Step 3: Create a Policy Routing , Configure > Routing > Policy Routing .
Step 4: Set Route Precedense , VPN>Policy>Static {Your Choice of sequence}.
Command in Console> system route_precedence set vpn policyroute static
Do the same on both end and If you VPN is UP , it would route through VPN tunnel and the same for Fibre connection.
Make sure you have Rules to allow to each zones applies for both incoming and Outgoing .
