Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » VPN tunnel to Watchguard
  •  
mcollien

Messages: 21
Karma: 2
Send a private message to this user
We're trying to to set up a IPSEC VPN tunnel from a Control 8.2 box to a Watchguard XTM 330 and not having any luck.

Anyone been successful with this?

--
Mark Collien
Technolutionary, LLC
Kerio Preferred Partner
  •  
Jonas Rodrigues (Kerio)

Messages: 262
Karma: 22
Send a private message to this user
Hi Mark,

Check out the following KB article.

http://kb.kerio.com/product/kerio-control/vpn/configuring-ip sec-vpn-tunnel-kerio-control-and-another%09device-1390.html

I hope it helps.

All the best,

Jonas

Kerio Technical Support
Log Support Incidents here: http://www.kerio.com/support
Also, please use our KB: http://kb.kerio.com
  •  
mcollien

Messages: 21
Karma: 2
Send a private message to this user
Thanks, We figured it based on help from support which mirrors that KB document.

But the short description to make it work with our Watchguard was:

Create the IPSec tunnel in Kerio

Change the tunnel to be passive on the Kerio side, so that the watchguard can kick off the tunnel

Edit the /var/winroute/winroute.cfg file in Control

Look for the VPN tunnel you just created in the config file and change 2 variables (they should already be there, but empty)

<variable name="Ike">aes128-sha1-modp1024</variable>

<variable name="Esp">aes128-sha1</variable>

Save the changes and reboot Control.

Of course set up the IPSec tunnel on the Watchguard side too.

Tunnel has been up and solid for several days.





--
Mark Collien
Technolutionary, LLC
Kerio Preferred Partner
Previous Topic: Fix IPSec Tunnel Public IP Address
Next Topic: Can't login to Kerio Control when I access HTTPS websites
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Oct 20 05:05:42 CEST 2017

Total time taken to generate the page: 0.00360 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.