Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 3 subscribers
  • Views 6762 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to Migrate an IPVPN from TMG?

sys8dmin

Hello,

i am trying to migrate a IPVPN connection from TMG across to my Sophos UTM.

The TMG set up is:

  • Our ISP managed Core Router in our building has a VPN port which is connected to the "VPN" configured LAN adapter on our TMG server
  • The VPN adapter is set up to use one of our external IP addresses
  • Our remote sites connect back to this Core router via ISP managed Cisco router at each site

I have tried setting up a new interface on the UTM device with the same settings as the old VPN interface, then powering off the old TMG firewall, enabling the new interface on the UTM but I wasn't seeing any traffic across the interface and I could not ping my remote sites?

Does anyone have any pointers?

Thanks,

Mark.



This thread was automatically locked due to age.
  • 0

    I did a test yesterday evening and I was seeing some traffic going across the interface "eth2" but I was still unable to connect to my remote sites. below are some logs for the test period. I can see some default dropped packets on fwrule="60002" but I believe that my firewall rules are set up correctly (image attached).

    

    2016:04:13-17:37:06 srv-utm1-1 ulogd[24558]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="18" initf="eth2" outitf="eth0" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="192.168.14.37" dstip="172.16.5.8" proto="17" length="84" tos="0x00" prec="0x00" ttl="58" srcport="11540" dstport="53" 
2016:04:13-17:37:06 srv-utm1-1 ulogd[24558]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="18" initf="eth2" outitf="eth0" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="192.168.10.1" dstip="172.16.5.8" proto="17" length="96" tos="0x00" prec="0x00" ttl="58" srcport="137" dstport="137" 
2016:04:13-17:37:09 srv-utm1-1 ulogd[24558]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="18" initf="eth2" outitf="eth0" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="192.168.18.122" dstip="172.16.5.8" proto="17" length="67" tos="0x00" prec="0x00" ttl="122" srcport="63189" dstport="53" 
2016:04:13-17:37:11 srv-utm1-1 ulogd[24558]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="18" initf="eth2" outitf="eth0" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="192.168.14.37" dstip="172.16.5.15" proto="17" length="84" tos="0x00" prec="0x00" ttl="58" srcport="11476" dstport="53" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:13 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="18" initf="eth2" outitf="eth2" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="192.168.18.126" dstip="192.168.16.8" proto="17" length="105" tos="0x00" prec="0x00" ttl="122" srcport="59328" dstport="161" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:14 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:15 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:15 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:15 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:15 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:15 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:15 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:15 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="18" initf="eth2" outitf="eth0" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="192.168.14.37" dstip="172.16.5.8" proto="17" length="73" tos="0x00" prec="0x00" ttl="58" srcport="12611" dstport="53" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="18" initf="eth2" outitf="eth0" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="192.168.10.1" dstip="172.16.5.15" proto="17" length="66" tos="0x00" prec="0x00" ttl="58" srcport="38093" dstport="53" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:16 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:17 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:17 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:17 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:17 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:17 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:17 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:17 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:18 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="96" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:18 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:18 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:18 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:18 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="206" tos="0x00" prec="0x00" ttl="126" srcport="138" dstport="138" 
2016:04:13-17:37:18 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="236" tos="0x00" prec="0x00" ttl="126" srcport="138" dstport="138" 
2016:04:13-17:37:20 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:20 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:20 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:20 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:20 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:20 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:21 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="206" tos="0x00" prec="0x00" ttl="126" srcport="138" dstport="138" 
2016:04:13-17:37:21 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:21 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:21 srv-utm1-1 ulogd[24558]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="18" initf="eth2" outitf="eth0" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="192.168.14.37" dstip="172.16.5.15" proto="17" length="73" tos="0x00" prec="0x00" ttl="58" srcport="11756" dstport="53" 
2016:04:13-17:37:21 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:21 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:22 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="206" tos="0x00" prec="0x00" ttl="126" srcport="138" dstport="138" 
2016:04:13-17:37:22 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:22 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:23 srv-utm1-1 ulogd[24558]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="18" initf="eth2" outitf="eth0" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="192.168.18.122" dstip="172.16.5.8" proto="17" length="67" tos="0x00" prec="0x00" ttl="122" srcport="50636" dstport="53" 
2016:04:13-17:37:23 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="206" tos="0x00" prec="0x00" ttl="126" srcport="138" dstport="138" 
2016:04:13-17:37:25 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:25 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="218" tos="0x00" prec="0x00" ttl="126" srcport="138" dstport="138" 
2016:04:13-17:37:25 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:26 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:26 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137" 
2016:04:13-17:37:26 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="218" tos="0x00" prec="0x00" ttl="126" srcport="138" dstport="138" 
2016:04:13-17:37:26 srv-utm1-1 ulogd[24558]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth2" outitf="eth1" srcmac="a8:0c:0d:c2:a3:01" dstmac="00:1a:8c:f0:5c:e2" srcip="169.254.130.248" dstip="169.254.255.255" proto="17" length="78" tos="0x00" prec="0x00" ttl="126" srcport="137" dstport="137"
    
				                    
    
                
    
            
    
        	
    

		
		
		
		
	
    
	
    
		
    
			
		
    
	
    
	
    
		
						
				
				
				
				
				
		
		
    
			
		
    
	
    

    

    • 

	

  • 
	
    



	
		
	
	



    
	
    
		
    
							
					
    
		
    
			
													0
							
			
				
									
							
						
				
			
					
    
	
    

		
		
    
					
    I'm not sure what I'm looking at in the Firewall log, but I guess that you have a different problem.  Unless you set the Virtual MAC on the interface used for the VPN to be the same MAC as the one on the TMG, you will need to clear the ARP table in any router/switch that was formerly connected directly to the TMG. The easiest way to clear the ARP tables is to reboot the router/switch.  Any luck with that?
    


    Cheers - Bob 
    
				                    
    
                
     
    

    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    

    MediaSoft, Inc. USA
    
            
    
        	
    

		
		
		
		
	
    
	
    
		
    
			
		
    
	
    
	
    
		
						
				
				
				
				
				
		
		
    
			
		
    
	
    

    

    • 

	

  • 
	
    



	
		
	
	



    
	
    
		
    
							
					
    
		
    
			
													0
							
			
				
									
							
						
				
			
												
						in reply to BAlfson
					
									
    
	
    

		
		
    
					
    Second this.  Most of the time I have gotten away with out doing this but every once in a while the ISP equipment just does not want to give-up the old MAC.
    
				                    
    
                
    
            
    
        	
    

		
		
		
		
	
    
	
    
		
    
			
		
    
	
    
	
    
		
						
				
				
				
				
				
		
		
    
			
		
    
	
    

    

    • 

	

  • 
	
    



	
		
	
	



    
	
    
		
    
							
					
    
		
    
			
													0
							
			
				
									
							
						
				
			
												
						in reply to jimmygrec
					
									
    
	
    

		
		
    
					
    Thanks guys, I will try a reboot of the Cisco switch while the interface is running through the UTM and report back.
    

    Thanks,
    Mark.
    
				                    
    
                
    
            
    
        	
    

		
		
		
		
	
    
	
    
		
    
			
		
    
	
    
	
    
		
						
				
				
				
				
				
		
		
    
			
		
    
	
    

    

    • 

	

  • 
	
    



	
		
	
	



    
	
    
		
    
							
					
    
		
    
			
													0
							
			
				
									
							
						
				
			
												
						in reply to sys8dmin
					
									
    
	
    

		
		
    
					
    Hi,
    

    The issue turned out to be 2 missing Masquerading Rules on the UTM under Network Protection\ NAT\ Masquerading.
    

    

     
    

    With the help of a Sophos support Rep we were able to add these two rules and get traffic flowing over the VPN Interface.
    

    before this I had contacted my ISP and confirmed that there were no ARP or router issues stopping the connection.
    

    Thanks.
    
				                    
    
                
    
            
    
        	
    

		
		
		
		
	
    
	
    
		
    
			
		
    
	
    
	
    
		
						
				
				
				
				
				
		
		
    
			
		
    
	
    

    

    • 

	





	
			








































			






















Unfiltered HTML