IPOffice SCN via two firewalls 1

[iProfessor]

Hi All

I have two IPOffice 500's i need to join with SCN. Each IPOffice sits behind a Sophos xg firewall and there is a Sophos "RED" link between the 2 firewalls.

The route from one IPOffice to the other via the 2 firewalls is wide open, no ports blocked as it is inside a private network.

I cannot get the SCN to connect. it does not matter how i set the NAT on the firewalls.

Anyone have any ideas how to get this to work please?

 

[IPGuru]

Do you have a VPN between the 2 firewalls or are you trying to connect the IPO's to the public addresses of the firewalls?

you must have a VPN
Also We had one cust who tried to use software VPN solution that used PPTP that they simply could not get to work - installing Daytek routers @ each end with ip-sec VPN between them proved the issue was with the customers VPN solution.
the exact cause was never identified (cust stuck with the Drayteks )


Do things on the cheap & it will cost you dear

 

[iProfessor]

Hi IPGuru

The RED link is a Sophos proprietary vpn between the firewalls.

I am pretty sure that RED is neither pptp or ipsec

 

[Westi]

seems it doesn't work so use ipsec and it will work.
not much sense in troubleshooting if you can circumvent easier.

Joe W.

FHandw, just expired ACSS (SME)


"This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[iProfessor]

I'll give it a go, thanks Westi

 

[janni78]

The route from one IPOffice to the other via the 2 firewalls is wide open

it does not matter how i set the NAT on the firewalls.

Which one is it, NAT or routed?
There shouldn't be any NAT, especially if you use H.323 SCN link.

"Trying is the first step to failure..." - Homer

 

[iProfessor]

Hi Janni78

Have tried with no Nat at all, no joy

 

[janni78]

After what I can tell by looking around a bit a RED link is always "NATed".

"Trying is the first step to failure..." - Homer

 

[iProfessor]

I am trying an IPSec vpn now.

busy working through it

 

[iProfessor]

Hi All

Thanks for the help.

I created an IPSec vpn and all is working.

 

[derfloh]

If they are within a private network why can't you just create a direct link between the two XG firewalls? No need for VPN...

I worked with a customer who had branches connected through sophos red boxes. IPO and IPBS could be reached from the main side so I think it must not be necessarily NAT.