# VPN со сторонними решениями
# Симптомы

*   *Не строится VPN с Cisco, ASA, FortiGate, CheckPoint, NSX Edge, С-терра, MikroTik*
*   *Возможно ли настроить UserGate NGFW как VPN-сервер для Site-to-Site VPN IPsec?*

# Решение

Cisco:
[https://docs.usergate.com/nastrojka-site-to-site-vpn-mezhdu-usergate-i-cisco\_40.html](https://docs.usergate.com/nastrojka-site-to-site-vpn-mezhdu-usergate-i-cisco_40.html)
[https://docs.usergate.com/nastrojka-gre-over-ipsec-mezhdu-usergate-i-cisco\_47.html](https://docs.usergate.com/nastrojka-gre-over-ipsec-mezhdu-usergate-i-cisco_47.html "https://docs.usergate.com/nastrojka-gre-over-ipsec-mezhdu-usergate-i-cisco_47.html")
[https://docs.usergate.com/nastrojka-vpn-tunnelya-mezhdu-usergate-ngfw-i-cisco-asr1002-x\_729.html](https://docs.usergate.com/nastrojka-vpn-tunnelya-mezhdu-usergate-ngfw-i-cisco-asr1002-x_729.html "https://docs.usergate.com/nastrojka-vpn-tunnelya-mezhdu-usergate-ngfw-i-cisco-asr1002-x_729.html")
[https://docs.usergate.com/oshibki-pri-vzaimodejstvii-usergate-i-cisco-asa\_50.html](https://docs.usergate.com/oshibki-pri-vzaimodejstvii-usergate-i-cisco-asa_50.html "https://docs.usergate.com/oshibki-pri-vzaimodejstvii-usergate-i-cisco-asa_50.html")

FortiGate:
[https://docs.usergate.com/nastrojka-vpn-soedineniya-mezhdu-usergate-i-fortigate\_43.html](https://docs.usergate.com/nastrojka-vpn-soedineniya-mezhdu-usergate-i-fortigate_43.html)

CheckPoint:
[https://docs.usergate.com/nastrojka-vpn-tunnelya-mezhdu-usergate-ngfw-i-checkpoint\_730.html](https://docs.usergate.com/nastrojka-vpn-tunnelya-mezhdu-usergate-ngfw-i-checkpoint_730.html)

NSX Edge:
[https://docs.usergate.com/nastrojka-vpn-tunnelya-mezhdu-usergate-i-nsx-edge\_697.html](https://docs.usergate.com/nastrojka-vpn-tunnelya-mezhdu-usergate-i-nsx-edge_697.html)

S-Terra:
[https://docs.usergate.com/nastrojka-ipsec-tunnelya-mezhdu-s-terra-gate-i-usergate-ngfw\_104.html](https://docs.usergate.com/nastrojka-ipsec-tunnelya-mezhdu-s-terra-gate-i-usergate-ngfw_104.html)

MikroTik:
[https://docs.usergate.com/nastrojka-routera-mikrotik-dlya-ustanovki-vpn-soedineniya-s-usergate\_41.html](https://docs.usergate.com/nastrojka-routera-mikrotik-dlya-ustanovki-vpn-soedineniya-s-usergate_41.html "https://docs.usergate.com/nastrojka-routera-mikrotik-dlya-ustanovki-vpn-soedineniya-s-usergate_41.html")

Linux:
[https://docs.usergate.com/nastrojka-ipsec-vpn-tunnelya-mezhdu-usergate-i-linux-serverom\_564.html](https://docs.usergate.com/nastrojka-ipsec-vpn-tunnelya-mezhdu-usergate-i-linux-serverom_564.html "https://docs.usergate.com/nastrojka-ipsec-vpn-tunnelya-mezhdu-usergate-i-linux-serverom_564.html")

Настроить VPN между NGFW и другими решениями возможно несколькими способами:

1.  L2TP\IPSec, в котором NGFW выступает в роли сервера. Клиентское подключение UserGate NGFW к VPN-серверам сторонних производителей по протоколам L2TP/IPsec не поддерживается [https://docs.usergate.com/vpn-dlya-zashishennogo-soedineniya-ofisov-(site-to-site-vpn)\_1326.html](https://docs.usergate.com/vpn-dlya-zashishennogo-soedineniya-ofisov-\(site-to-site-vpn\)_1326.html "https://docs.usergate.com/vpn-dlya-zashishennogo-soedineniya-ofisov-(site-to-site-vpn)_1326.html")
2.  На 6 версии NGFW для соединения Site-to-Site VPN IPsec возможно использовать только в качестве VPN-клиента. 
    Начиная с версии 7.1 реализована возможность NGFW выступать в роли сервера IPSec IKEv1 (SUM-3300)
3.  GRE over IPSec, из доступных есть инструкция на примере Cisco -  [https://docs.usergate.com/nastrojka-gre-over-ipsec-mezhdu-usergate-i-cisco\_47.html](https://docs.usergate.com/nastrojka-gre-over-ipsec-mezhdu-usergate-i-cisco_47.html)

# Примечание

Все инструкции взаимодействия с внешними решениями:
[https://docs.usergate.com/vzaimodejstvie-so-storonnimi-resheniyami-668](https://docs.usergate.com/vzaimodejstvie-so-storonnimi-resheniyami-668/ "https://docs.usergate.com/vzaimodejstvie-so-storonnimi-resheniyami-668/")