VPN IPSEC on X550e

[ewin740]

Does anyone have an instruction on How to Configure my FB X550e to allow Watchguard VPN IPSEC?

I currently have PPTP working smoothly but we would like to switch to IPSEC VPN

My watchguard is behind a NETOPIA DSL ...(Netopia Model 3347-02 AnnexA High-Power Wireless DSL Ethernet Managed Switch)

NETOPIA DSL Assigned LAN IP: 192.168.1.10
and my X550E has IP 192.168.1.100 (Drop-in mode)

 

[ShackDaddy]

Is this a site-to-site VPN, or is it for end-users to connect to the network?

Dave Shackelford
ThirdTier.net

 

[ewin740]

forgive me for the late update.
it's for remote end user to connect to the company network via ipsec.
I've installed latest Mobile vpn ipsec client and using Fireware 10.2.7

whenever I initiate a remote vpn ipsec session it does not go thru, The traffic log on the Firebox shows this:

2009-03-01 10:02:26 Deny 68.61.234.xx 70.227.62.xx icmp-Dest_Unreach code(3) 0-External/PPPoE Firebox icmp error with data src_ip=70.227.62.xx dst_ip=68.61.234.xx pr=ike/udp src_port=500 dst_port=500 src_intf='0-External/PPPoE' dst_intf='0' cannot match any flow, drop this packet 56 47 (internal policy) rc="104" Traffic


I've imported the ipsec profile to my laptop and trying to VPN via WLAN connection.
what needs to be changed on the firebox side?