IPSEC VPN definitions

Hi again

i found this in the console but have no idea what the errors mean

Sophos Firmware Version SFOS 16.05.5 MR-5

console> show vpn IPSec-logs
Jun 29 09:52:54 Changing to directory '/conf/certificate/aacerts'
Jun 29 09:52:54 Changing to directory '/conf/certificate/ocspcerts'
Jun 29 09:52:54 Changing to directory '/conf/certificate/crls'
Jun 29 09:52:54 loaded crl file 'Default.tar.gz' (673 bytes)
Jun 29 09:52:54 file coded in unknown format, discarded
Jun 29 09:52:54 loaded crl file 'Default.crl' (747 bytes)
Jun 29 09:52:54 digest algorithm not supported
Jun 29 09:52:54 loaded crl file 'ClientAuthentication_CA.crl' (698 bytes)
Jun 29 09:52:54 crl issuer cacert not found for (file:///conf/certificate/crls/ClientAuthentication_CA.crl\352\020\010\220\240pw"\315aw)
Jun 29 10:01:16 added connection description "avayaremote-1"

This does not look right to me "digest algorithm not supported"

Jon,

can you share the VPN Configuration you are using?

Thanks

Jon,

can you share the VPN Configuration you are using?

Thanks

Ok hope i give you all you need

IPSEC connection

name - avayaremote

connection type - remote access

policy - default remote access

Action on vpn restart - respond only

Auth type - PSK

Local network - port 2

local subnet - local destination

LocalID - set it to DNS and entered a url, not actually sure what to put.

Allow nat transversal - yes

Remote lan network - any

RemoteID - as LocalID

specified a local user with rights to all vpn's

Did nothing with certificates, left as application certificate

There is a firewall profile allowing traffic from that user to the destination subnet

I tried the same connection from windows 10, the XG did not seem to respond

Jon,

please take a look at this 2 KB:

https://community.sophos.com/kb/en-us/125446

https://community.sophos.com/kb/en-us/125226

And make sure  that if XG is behind another router/firewall, to forward the ports used by L2TP:

 UDP 4500 / 500 / 1701 

Hi

I am confused. The links you sent me are for L2TP, i was talking about IPSec. 

Jon,

L2TP and IPSec are combined in order to provide encryption and then confidentiality because L2TP does not include that. So If you are allowing your remote users to access your network, you are creating an L2TP/IPsec tunnel.

Regards

Hi

Can you advise me on any free training to help me understand this because i see no connection between the two in the XG.

I am lost and confused

Jon,

the documentation should be enough to configure the VPN. Make sure no other Firewall router are in front of XG.

I can have a look at your config if the issue persists.

Regards

Hi

Unfortunately my lack of knowledge prevails.

The Sophos documentation is not written for the novice (i.e.me) it is written for people who already know. I am trying to learn at the same time, i do not see any Sophos documentation that contains examples.

Both L2TP and IPSec use a PSK but it only goes in a client once, does not make sense to me.

Jon,

I do not understand what are your doubts. The Documentation provides all the steps necessary to allow remote users to connect to XG. You can also use SSL VPN which is more secure and more simple to configure.

Regards

Hi

Let me ask this

What would you give someone trying to setup vpn for the very first time with no experience.

http://www.dummies.com/programming/networking/network-administration-vpn-security/

https://en.wikipedia.org/wiki/Layer_2_Tunneling_Protocol

http://www.networkworld.com/article/2163334/tech-primers/what-can-l2tp-do-for-your-network-.html

Regards