VPN Option - Quick Mode Selectors

Max,

in order to establish a Site to Site VPN, the connection will need to use a port from one side to another as a classic client-server connection. Leaving * will use any available port both VPN Terminator will accordingly share. You can force the port using a fixed number. This can be helpful if there is another firewall between the 2 VPN Concentrators and only specific ports are allowed.

More info here:

http://docs.sophos.com/nsg/sophos-firewall/v16056/Help/en-us/webhelp/onlinehelp/index.html#page/onlinehelp%2FAddEditSitetoSiteIPSec.html%23

Regards

Luk,

thanks for your answer. The example with the firewall between the two devices made it understandable for me.

If i set this option for example to port 187 tcp where can i see that the connection is using this port ?

Max

Max,

you are welcome.

Use a tcpdump port 187 from XG and see if traffic is flowing on that port.

Regards

Max,

you are welcome.

Use a tcpdump port 187 from XG and see if traffic is flowing on that port.

Regards