#Configuration Guide# How to Configure IPSec VPN with Sanfor and a 3rd Party Firewall
  

RegiBoy Lv5Posted 11 Oct 2022 14:15

Last edited by RegiBoy 11 Oct 2022 17:12.


# Configuration Guide# How to Configure IPSec VPN with Sangfor and a 3rdParty Firewall

*Product: NGAF
*Version:8.0.47
*1. Introduction
1.1 Scenario
Configure an IPSec VPN on the NGAF. The other end is a 3rdParty Security Appliance (Firewall). Their respective Local LAN should have aconnection.
1.       Sangfor NGAF:
Local IP: 20.0.0.0/24
2.      3rd Party Firewall
Local IP: 10.11.22.0/24

Topology:
85537634506d32c01e.png

1.2 Requirements
1. Assume that the 3rd PartyFirewall has already set and has connection to the internet.
2. Endpoints on the NGAF side must have routeto the NGAF and can access the internet also.

*2. Configuration Guide
2.1 NGAF Configuration

Step 1.Configure the interface, zone and attributes:
Go to Network> Interfaces

13723634506f81eedb.png
* Set the IP Adress to Static
* Input 219.92.2.8/24 as pictured atthe topology


Step 2: Configure the VPN Path, go to Network> IPSec VPN > Basic Settings.

50891634508103a5f1.png

* Set the IP Address of the3rd Party Firewall


Step:3 Configure connections between Local Peers
Go to Network > Third-Party Connection > Add New Connection

95809634508ddccda9.png
·       LocalIP Address: Input the intranet network segment of thelocal device
·       PeerIP Address: Input the intranet network segment ofthe peer device

Step 4: IKE Options

889646345099d547e7.png

Step 5: Other Options

36939634509c8a7eaf.png

Step 6: After successfully configuration, we can verify the status of the tunnel in the IPSec VPN > Status
2092663450e7218469.png

*3. Precaution
1. Dynamic IP needsto apply for a domain name.

Like this topic? Like it or reward the author.

Creating a topic earns you 5 coins. A featured or excellent topic earns you more coins. What is Coin?

Enter your mobile phone number and company name for better service. Go

rivsy Lv5Posted 11 Oct 2022 14:30
  
thank you for this wonderful information
RegiBoy Lv5Posted 11 Oct 2022 14:40
  
I hope it can be useful to the community
Rhebie Lv3Posted 11 Oct 2022 14:41
  
Thank you for sharing.
Zonger Lv3Posted 11 Oct 2022 17:43
  
Thank you for sharing
Newbie517762 Lv4Posted 11 Oct 2022 17:47
  
Thank you for sharing !
Faisal P Posted 28 Oct 2022 22:11
  
Thank you very much for the information ...