Management Server Is not able to login via IPsec Tunnel

[Rakesh1313]

Hello Team,

Two checkpoint 6200-P Quantum firewall is configured in cluster, and management server is configured in local vm-appliance and IPsec tunnel is configured between checkpoint and sophos firewall.

But when we are trying to access the management server behind the sophos firewall, i am getting the errror below.

Unable to connect the management server.

Management server and both firewall is reachable behind the sophos firewall, I have allowed 19009 port also into sophos policy for VPN traffice but still the error is same.

I have tried to capture the tcpdump but was not able to understand why management server is not rechable.

I have also attached the tcpdump logs file.

Please help me to get it resolved.

[_Val_]

Some topology diagrams and details about Sophos VPN might help.

[Rakesh1313]

I dont have topology diagram right now but i have attached logs for refrence.

it will help to you?

[_Val_]

No, logs you are attached are not helping at all.

[the_rock]

Whats failing? ssh, console, web ui? Can you swnd output of api status and cpwd_admin list if ssh is accessible?

Andy

[Rakesh1313]

Hello, I am not able to login into smart console.

[Lesley]

On what device this tcpdump is made?

Looks like there is a route incorrect. This looks like return traffic. I do not see initial traffic in capture meaning it comes in on ETHX and it replies on ETHY this will be out of state. 

[Rakesh1313]

Tcpdump is made on the primary gateway,