IPSEC VPN definitions

Hi again

i found this in the console but have no idea what the errors mean

Sophos Firmware Version SFOS 16.05.5 MR-5

console> show vpn IPSec-logs
Jun 29 09:52:54 Changing to directory '/conf/certificate/aacerts'
Jun 29 09:52:54 Changing to directory '/conf/certificate/ocspcerts'
Jun 29 09:52:54 Changing to directory '/conf/certificate/crls'
Jun 29 09:52:54 loaded crl file 'Default.tar.gz' (673 bytes)
Jun 29 09:52:54 file coded in unknown format, discarded
Jun 29 09:52:54 loaded crl file 'Default.crl' (747 bytes)
Jun 29 09:52:54 digest algorithm not supported
Jun 29 09:52:54 loaded crl file 'ClientAuthentication_CA.crl' (698 bytes)
Jun 29 09:52:54 crl issuer cacert not found for (file:///conf/certificate/crls/ClientAuthentication_CA.crl\352\020\010\220\240pw"\315aw)
Jun 29 10:01:16 added connection description "avayaremote-1"

This does not look right to me "digest algorithm not supported"

Jon,

can you share the VPN Configuration you are using?

Thanks

Hi

Let me ask this

What would you give someone trying to setup vpn for the very first time with no experience.

http://www.dummies.com/programming/networking/network-administration-vpn-security/

https://en.wikipedia.org/wiki/Layer_2_Tunneling_Protocol

http://www.networkworld.com/article/2163334/tech-primers/what-can-l2tp-do-for-your-network-.html

Regards

Thank you

Next Questions

Is there a Sophos step by step guide to setting up L2TP over IPSec? all i can find is setting up L2TP.

How does L2TP over IPSec work on the XG? i see no settings that link the two.

It is the one I posted before:

https://community.sophos.com/kb/en-us/125446

This is the one for L2TP/IPSec. IPSec is included into L2TP.

Aha!

I did not know that IPSec was included in L2TP, no way for me to know that.

So why are their IPSec profiles and connections?

Jon,

use the documentation provided. IPSec profiles are used by Site to site IPSec VPN (when 2 organizations want to communicate). Profiles are used to edit IPSec mode, authentication type and other parameters that are difficult to understand.

More info on Sophos L2TP from online help: http://docs.sophos.com/nsg/sophos-firewall/v16055/Help/en-us/webhelp/onlinehelp/index.html#page/onlinehelp%2FL2TPConnectionEdit.html%23

You can find more info regarding IPSec, Site to Site and L2TP on google or wikipedia.

Thank you for your help

"Something is only obvious if you know it is there"

Hi

Sorry, one more thing.

Is there a way to monitor on the XG incoming vpn connection attempts. Would like to diagnose what is wrong.

Jon,

use the log viewer in order to read log. System log.

Hi Luk

Looked at all the logs but can't see connection attempts, only shows what i did in the gui. The phone is communicating with the firewall but fails vpn user auth.

Hi Luk

Looked at all the logs but can't see connection attempts, only shows what i did in the gui. The phone is communicating with the firewall but fails vpn user auth.