Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ipsec dynamic ip won't allow reconnect

Hi,

I've got the following setup with the following having static ips all with UTMs and using RSA auth (even happens with a passphrase) Head office has been configured with "Receive only" the rest all initiate the connection

HeadOffice 
Office 1
Office 2
Office 3

CEO home with dynamic IP

now when when the CEO's IP change the IPSEC tunnel will not reestablish a connection until I turn it on and off on the UTM.

is there anyway to have it auto reestablish after 5min?

I've left it all weekend once and it hasn't reestablished the tunnel.

Regards,
Aza


This thread was automatically locked due to age.
Parents
  • Aza, a RED 10 is a great alternative for situations like this.

    If you plan to stay with IPsec, I would recommend that you get the CEO setup with a dynamic DNS account so that you can set the HeadOffice to use an "Initiate connection" Remote Gateway for his tunnel.

    In any case you should replace the other three Remote Gateways with clones that use "Initiate connection."

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Aza, a RED 10 is a great alternative for situations like this.

    If you plan to stay with IPsec, I would recommend that you get the CEO setup with a dynamic DNS account so that you can set the HeadOffice to use an "Initiate connection" Remote Gateway for his tunnel.

    In any case you should replace the other three Remote Gateways with clones that use "Initiate connection."

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data