Sophos Firewall

Discussions SFOS 17.0.2 MR-2 IPSEC and L2TP VPN not working after update

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
+2 person also asked this people also asked this
Locked Locked
Replies 7 replies
Answers 1 answer
Subscribers 30 subscribers
Views 16045 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS 17.0.2 MR-2 IPSEC and L2TP VPN not working after update

VishvasChitale over 7 years ago

Dear

I have upgraded SFOS 17.0.2 MR-1 to MR-2 and IPSEC VPN and L2TP VPN is not working . Need Help to resolve the isuue

BR

Vishvas

This thread was automatically locked due to age.

Parents

+1 VishvasChitale over 7 years ago

Dear All

I have recreated the Both IPSEC and L2TP deleting migrated ones ,then also corrected DH Group and Encryption as per the security recommendations and it

is working.

BR

Vishvas
Cancel
Vote Up 0 Vote Down

Cancel
0 QTO over 7 years ago in reply to VishvasChitale

This didn't work for me. The log is giving IKE errors on the connection with an SG. Reverted to MR1 and all is working again.
Cancel
Vote Up 0 Vote Down

Cancel
0 Big_Buck over 7 years ago in reply to QTO

Have you corrected DH Group and Encryption ?

PJR
Cancel
Vote Up 0 Vote Down

Cancel
0 VishvasChitale over 7 years ago in reply to Big_Buck

Dear Sir

I have corrected DH group and Encryption as per recommendation and every thing is working fine.

BR

Vishvas
Cancel
Vote Up 0 Vote Down

Cancel
0 Chad Fengel over 7 years ago in reply to Big_Buck

What changes need to be made to DH group and encryption?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Chad Fengel over 7 years ago in reply to Big_Buck

What changes need to be made to DH group and encryption?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Big_Buck over 7 years ago in reply to Chad Fengel

These parameters have to be the same at both ends. Particularly for multi vendor. In my case following guide lines from Sophos failed because "Main Office" and "Remote Office" profiles di no have same time out parameters.

PJR
Cancel
Vote Up 0 Vote Down

Cancel