[ANSWERED] Site-to-Site (IPSEC) VPN between UTM 9.3 and Copernicus

SK2003 over 9 years ago

Hi there,

I tried to establish a VPN Connection between a UTM 9.3 and Copernicus.

1. I defined a Policy that matches the AES256 PFS Policy on UTM 9.3 in Copernicus
2. I defined the other policy Settings for the VPN-Connection

After that the VPN-Connection was successfully established (according to UTM 9.3 and Copernicus)
But it's not possible to reach any host through the VPN-Connection.

Any ideas?

Parents

0 snehagohil over 9 years ago

HI,

You need to allow the traffic on Copernicus by VPN to LAN and LAN to VPN policy.

Regards,
Sneha
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 snehagohil over 9 years ago

HI,

You need to allow the traffic on Copernicus by VPN to LAN and LAN to VPN policy.

Regards,
Sneha
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 SK2003 over 9 years ago in reply to snehagohil

When testing I already allowed traffic from LAN to VPN but not from VPN to LAN.
I weren't able to reach the Remote VPN LAN after doing that.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 AzRoN over 9 years ago in reply to SK2003

If you could post up some of the 'Policy' logs will hopefully show what the issue is.

Can you provide more information on these Network Policies you set, eg: screen caps.

==

When in doubt, Script it out.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 SK2003 over 9 years ago in reply to AzRoN

I was able to find the problem.

I used the same Policy I normally use to Access the Internet.
In that policy "Rewrite source address" was active.

So the traffic was allowed but the source address was replaced by my public IP.
That was reason it couldn't work.

I now configured a new policy exclusively for VPN without masquerading.
Now it works [:)]

Thank you all for your assistance.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel