Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 1723 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPsec sit-to-site with RSA

corsairetc
Hello, 
recently I was manage backup internet connection. This two connections are connected to cisco router and the yre hadled via BGP protocol. 
My question is:
We have two astaro's conected together vis IPsec site-to-site with RSA key's.
What should I do to add this backup connection to remote astaro. It enough to create second remote gateway with second public IP adress and put there RSA public key on remote side.


This thread was automatically locked due to age.
Parents
  • 0
    This is a little confusing.  If you really have BGP, then the IP shouldn't change, just the route to it, and that should be invisible to the other site.  If not, the easy solution is to replace the Remote Gateway in the other Astaro with an identical one in "Respond only" mode.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    This is a little confusing.  If you really have BGP, then the IP shouldn't change, just the route to it, and that should be invisible to the other site.  If not, the easy solution is to replace the Remote Gateway in the other Astaro with an identical one in "Respond only" mode.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
Unfiltered HTML