#Configuration Guide# How to Configure IPSec VPN with Sanfor and a 3rd Party Firewall
  

RegiBoy Lv5Posted 11 Oct 2022 14:15

Last edited by RegiBoy 11 Oct 2022 17:12.


# Configuration Guide# How to Configure IPSec VPN with Sangfor and a 3rdParty Firewall

*Product: NGAF
*Version:8.0.47
*1. Introduction
1.1 Scenario
Configure an IPSec VPN on the NGAF. The other end is a 3rdParty Security Appliance (Firewall). Their respective Local LAN should have aconnection.
1.       Sangfor NGAF:
Local IP: 20.0.0.0/24
2.      3rd Party Firewall
Local IP: 10.11.22.0/24

Topology:

1.2 Requirements
1. Assume that the 3rd PartyFirewall has already set and has connection to the internet.
2. Endpoints on the NGAF side must have routeto the NGAF and can access the internet also.

*2. Configuration Guide
2.1 NGAF Configuration

Step 1.Configure the interface, zone and attributes:
Go to Network> Interfaces

* Set the IP Adress to Static
* Input 219.92.2.8/24 as pictured atthe topology


Step 2: Configure the VPN Path, go to Network> IPSec VPN > Basic Settings.


* Set the IP Address of the3rd Party Firewall


Step:3 Configure connections between Local Peers
Go to Network > Third-Party Connection > Add New Connection

·       LocalIP Address: Input the intranet network segment of thelocal device
·       PeerIP Address: Input the intranet network segment ofthe peer device

Step 4: IKE Options


Step 5: Other Options


Step 6: After successfully configuration, we can verify the status of the tunnel in the IPSec VPN > Status

*3. Precaution
1. Dynamic IP needsto apply for a domain name.

Like this topic? Like it or reward the author.

Creating a topic earns you 5 coins. A featured or excellent topic earns you more coins. What is Coin?

Enter your mobile phone number and company name for better service. Go

rivsy Lv5Posted 11 Oct 2022 14:30
  
thank you for this wonderful information
RegiBoy Lv5Posted 11 Oct 2022 14:40
  
I hope it can be useful to the community
Rhebie Lv3Posted 11 Oct 2022 14:41
  
Thank you for sharing.
Zonger Lv4Posted 11 Oct 2022 17:43
  
Thank you for sharing
Newbie517762 Lv5Posted 11 Oct 2022 17:47
  
Thank you for sharing !
Faisal P Posted 28 Oct 2022 22:11
  
Thank you very much for the information ...
Newbie840094 Lv1Posted 04 Nov 2023 17:24
  
I have successfully configured IPSec VPN with Sanfor and 3rd party, Can ping from sangfo client to 3rd party firewall client, but cannot ping vice versa , pls help
FahmiAzlanMY Lv1Posted 07 Feb 2024 09:20
  
Hi, how about both side are using dynamic IP?
Newbie719993 Lv1Posted 21 Feb 2024 10:38
  
Thank you for sharing