This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN setup to 'cloud' server

Hello,

I have XGv16.5 running as our main gateway/firewall at the main site currently. We are spinning up some servers in a hosted ESX cloud environment and have been tasked with creating a VPN link between the two. Let me start by saying, I have no idea where to start ... :S

The main goal would be to allow users at our main site (172.16.16.0/24) be able to access the hosted servers in the 'cloud' (behind a firewall image with a LAN of 192.168.0.0/24) without having to traverse the firewalls.

Any help would be appreciated.

Thanks

This thread was automatically locked due to age.

0 lferrara over 8 years ago

Stefan,

have a look at the guide here:

https://community.sophos.com/kb/en-us/123140

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Stefan B over 8 years ago in reply to lferrara

I followed the guide, was able to get the IPSec tunnel up and both lights green according to the XG webUI

But I am unable to connect to the other networks.

Log viewer isn't showing anything being dropped, but the Firewall rules show Bytes out but nothing in
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Stefan B

Stefan,

have a look at this thread and all the KB there are inside.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Stefan B over 8 years ago in reply to lferrara

I followed the thread and can only connect to the gateway/router login page hosted in the 'branch' location but no other servers. No connections from the branch location to the 'head office' location work.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Stefan B

Stefan,

did you create a LAN to VPN and VPN to LAN firewall rule?

Please show an output of

tcpdump "host remotehostip"

and

traceroute remotehostip

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Stefan B over 8 years ago in reply to lferrara

Firewall rules are in place for both directions on both servers, LAN -> VPN and VPN -> LAN

Here is the FW at the Head Office

Here is the FW at the Branch Office
Cancel
Vote Up 0 Vote Down

Cancel