This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site2Site with Subnets (UTM <-> Draytek)

Hello everybody,

i have little bit trouble with S2S IPSec-VPN.
I have a S2S-VPN between UTM in 192.168.3.0/24 and a draytek-vigor 2910 in 192.168.5.0/24. Behind the draytek is another network 172.31.6.0/24, i want to reach too - but no way.

If i put the network 172.31.*** in the "remote Networks"-Tab, only one Tunnel-SA is connected (192.168.5.0).
How can i reach the other network?

Any suggestions?

Thanks,
Lixilian

This thread was automatically locked due to age.

0 BAlfson over 11 years ago

Hi, lixilian, and welcome to the User BB!

You also must configure 172.31.6.0/24 as a "local network" in the Draytek.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 apijnappels over 11 years ago

I had a similar problem with a Draytek 2130 once. It accepted only one subnet (the first one specified) the other SA's just wouldn't come up.
It did work against a Juniper SSG5, but didn't against some other devices (including Sophos UTM).
Finally I also started using UTM @Home and now I don't have this problem no more. In my case I'm sure it was the Draytek causing the problems, since more people had likewise problems with the 2130.
Maybe it's more general to Draytek then just the 2130....

Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
Cancel
Vote Up 0 Vote Down

Cancel

Site2Site with Subnets (UTM <-> Draytek)

Submitted a Tech Support Case lately from the Support Portal?