Frequently Asked Questions
Current Firmware (Fireware XTM)
WatchGuard Firebox X Edge e-Series devices with Fireware XTM (Fireware 11) are fully supported in current versions of VPN Tracker. For details please see our configuration guide.
Older Firmware
Devices running an older firmware may often work using the following setup. Please note however that we can't guarantee that this setup will work in all cases.
Start by creating a new user on the Firebox Edge and then configure MUVPN support for this user.
In VPN Tracker, use a "Custom Connection" device profile as the basis for your new connection.
Map the WatchGuard settings to your VPN Tracker configuration as shown in the table below:
| Watchguard | VPN Tracker |
|---|---|
| Account Name | Local Identifier |
| Shared Key | Preshared Key |
| Virtual IP Address | Local Address |
| Authentication Algorithm | Phase 1 and Phase 2 Hash/Authentication Algorithms |
| Encryption Algorithm | Phase 1 and Phase 2 Encryption Algorithms |
| Key expiration in hours | Phase 1 and Phase 2 Lifetime |
The following settings are independent of your specific MUVPN configuration:
- Local Identifier Type: Email (even if it is a name and not an email address)
- Exchange Mode: Aggressive
- Phase 1 Diffie-Hellman Group: Group 2 (1024 bit)
- Perfect Forward Secrecy (PFS): off
Finally make sure the that VPN Tracker's "Network" setting is set to "Host to Network", and the correct Remote Network (i.e. the network that you want connect to through the VPN) is used (e.g. 192.168.1.0/255.255.255.0).