Cisco 3750 / Sonicwall TZ200 - Cannot Get NAT To Work
May 15, 2013
I am attempting to get a NAT connection to work through a Sonicwall TZ200 to a VLAN defined on a Cisco 3750 switch. So far I have not been able to get it to work. I am able from the VLAN to access the internet and devices on another VLAN.
I have reviewed the configuration of the Sonicwall with Sonicwall support. They checked and see no issue with the configuration. I have the NAT gateway set to the vlan gateway IP address.
Are there any particular configuration options that I need to set on the 3750 switch in order to be able to route the traffic from the internet to the VLAN?
View 4 Replies
ADVERTISEMENT
May 19, 2011
Hardware Configuration:
Office 1: Sonicwall TZ200 (192.168.11.xx)
Office 2: Sonicwall TZ100 (192.168.12.xx)
Home Office: Linksys RV042 v1 (192.168.13.xx)
The VPN tunnel between Office 1 and Office 2 is functioning.
The VPN tunnel Office 1 and HomeOffice has been established, BUT I cannot ping any subnets across the tunnel. I have tried different settings, and will post the current configuration later.
this setup and can post their respective settings.
View 2 Replies
View Related
May 22, 2011
Hardware Configuration:
Office 1: Sonicwall TZ200 (192.168.11.xx)
Office 2: Sonicwall TZ100 (192.168.12.xx)
Home Office: Linksys RV042 v1 (192.168.13.xx)
The VPN tunnel between Office 1 and Office 2 is functioning.The VPN tunnel Office 1 and HomeOffice has been established, BUT I cannot ping any subnets across the tunnel. I have tried different settings, and will post the current configuration later.
View 4 Replies
View Related
Feb 12, 2012
I have a side gig that I do some work for and they've had a Sonicwall TZ200 device in their branch office and also in their data center that has a site to site VPN connection between the two devices. About a month ago the bandwidth throughput got severly decreased. They went from getting about 28Mbps/27Mbps to now ~3Mbps/12Mbps.
I've spent days troubleshooting with Sonicwall which could be a whole dedicated thread on it's own but I digress. I even had the ISP come out and test the line and when they hooked up their own laptop it got the speeds it should be getting. I've rebuilt the config on the sonicwall from scratch which was a major pain in the ass because I'm not a firewall guy by any means. After firmware updates and pulling my hair out I've decided to dump the tz200, to what I don't know. I need two devices, one for the data center and one for the branch office. I'm pretty sure something in the config is causing this and after being escalated to the highest level at sonicwall and them sending me a replacement unit which I rebuilt the config on and also tried to import the old settings with no luck. I very well could have done something or made a change to cause this but I'm at a loss and willing to try another product.
I get spammed from Barracuda all the time, do they have quality devices? Something with a web interface would be great since I'm not a firewall guru by any means and had set up a bunch of address objects with NATs and all that.
View 19 Replies
View Related
May 12, 2011
To lay it out, I recently installed 4 of these in a new office space. We have them connected to a 3750 stack....
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 54 WS-C3750X-48P 12.2(53)SE2 C3750E-UNIVERSALK9-M
2 54 WS-C3750X-48P 12.2(53)SE2 C3750E-UNIVERSALK9-M
3 52 WS-C3750-48P 12.2(53)SE2 C3750-IPBASEK9-M
[Code].....
as you may notice, port f5/0/36 is showing not conencted. This is the case even if I move this LWAP to one of the other 3 ports that are working or even a port on one of the other 3 switch models in the stack. I troubleshot without cross connects, I changed port configs, I changed cables, but I still do not get a link. The LWAP does get power though and will start to boot, but then the status light on the top will just blink orange. sounds like the LWAP is broken.. BUT - if I move this LWAP to a port on a 6513, it connects to the switch and links to the WLC just fine.
View 6 Replies
View Related
Feb 14, 2012
I've been use to managing our ASA's on firmware 8.2, however we have got a couple of ASA's on firmware 8.4 for a new project and the NAT area especially in the ASDM is very different now, I feel like I know nothing. On these new ASA's on 8.4 that will be in active/standy mode I will be creating a sub interfaces off these by attaching a 3750 and I wondered how the NAT exempts will work.
I will have to use exempts as I don't want the source IP to change when going from one interface to another in certain situations and this setup described works well on 8.2, but how can I do this on 8.4 as I don't even see the option for creating NAT exempts, looks like a different world?
View 3 Replies
View Related
Jan 9, 2013
I created the configuration below to limit the bandwidth, but doesn't work
Qos - 3750
!
mls qosmls qos map policed-dscp 10 to 8!class-map match-all Testmatch access-group name ACL!policy-map QOSdescription Limit 10M set ip dscp af11 police
[Code]....
View 6 Replies
View Related
Apr 16, 2013
I have PC_A and PC_B connected to the same switch, and are put in the same vlan. PC_A is the master (source) and PC_B is the destination (client). IGMP Snooping is enabled by default.
Is there any reason why this should fail? There is no RP or any interface with PIM enabled. Its a flat network with a source and client in the same vlan...
IH-3750-LOADTEST-101#show ip igmp snooping vlan 724
Global IGMP Snooping configuration:
-------------------------------------------
IGMP snooping : Enabled
[Code].....
View 19 Replies
View Related
May 30, 2013
I have 2 local accounts on a 3750 that kick in should radius be unavailable. If I log in as the admin account it gets priv 15, if I log in as the other user it gets privilege 3 which is correct, by my commands dont work, this is what I have added and the strange thing is I've dont this many times before on our other switches
username admin privilege 15 secret ***
username users privilege 3 secret ***
aaa new-model
[Code]....
View 2 Replies
View Related
Apr 5, 2012
I have a 3750-48P when plugged in has fans that spin up, but no lights on the front of the chassis. Does this mean the power supply is bad? If its bad, why do the fans power up? Also, i am not receiving any data through the console.
View 6 Replies
View Related
Oct 29, 2012
I have two CISCO 2800 routers tied together over a Metro Ethernet bewteen an HQ location and a Colocation facility. There are multiple subnets on both sides of the MAN. All things work in this regard.
I added two new Interfaces to the routers to create a VPN failover should the above MAN go down. I use IP SLA to track the MAN, then move to the VPN route when reachability is down.
I can source ping from one CISCO router Interface to the other, through the two interfaces to the Sonicwalls and reach the router interface of the CISCO on the other side of the VPN tunnel.
Problem: I can not ping any subnet behind the interface I ping through the Sonicwall VPN tunnel?
Example 2800 G0/2 interface 100.1.1.41 /30 through Sonicwal over Internet to other Sonicwall and out ot the G0/2 100.1.10.41 /30 interface on the other 2800 router. Ping is fine.
View 15 Replies
View Related
Aug 16, 2011
I am building the VPN with Sonicwall and Cisco Router, the VPN status is indicated ok on the Sonicwall and able to ping only,I know it required ACL on Cisco but it failed, I cannot ping the sonicwall from cisco, the access from external to cisco internal is also fail.
Site A SonicWall = 192.168.1.0Site B (Cisco) = 192.168.143.0
crypto isakmp policy 15encr 3desauthentication pre-sharegroup 2lifetime 28800crypto isakmp key XXXXX address 118.142.###.###crypto ipsec security-association lifetime seconds 28800crypto ipsec transform-set T1 esp-3des esp-sha-hmaccrypto map tosonicwall2 15 ipsec-isakmpset peer 118.142.116.146set transform-set T1match address 110 ip nat inside source route-map nonat interface Dialer0 overloadip nat inside source static tcp 192.168.143.20 80 202.64.135.### 80 extendableip nat inside source static tcp 192.168.143.20 3389 202.64.135.### 3389 extendable!access-list 1 permit 192.168.143.0 0.0.0.255access-list 110 permit ip 192.168.143.0 0.0.0.255 192.168.1.0 0.0.0.255access-list 110 deny ip 192.168.143.0 0.0.0.255 anyaccess-list 115 permit ip 192.168.143.0 0.0.0.255 anyaccess-list 115 deny ip 192.168.143.0 0.0.0.255 192.168.1.0 0.0.0.255no cdp run!route-map nonat permit 10match ip address 115!
View 7 Replies
View Related
Feb 4, 2009
We have a several SonicWall TZ 190 establishing VPN tunnels with a ASA5520. Pericodically random VPN tunnels will drop and can not re-establish a connection. In order to re-establish the dropped VPN tunnel, our firewall folks manually drop all VPN tunnels connected to the ASA (they use to physically power cycle the ASA). They claim this is the only way to resolve the problem and since the SonicWall Life Time seconds for Phase 1 and 2 are set to 28800, they reset the tunnels every 8 hours. Additionally, they claim that SonicWall IPSEC is different that Cisco IPSEC which is the main problem. Hence they are requesting a SONICWAll VPN concentrator..
View 4 Replies
View Related
Feb 8, 2011
My SIP trunk provider uses a SonicWall Pro 3060, I need to initiate a IPSec VPN tunnel from an ASA 5505 (ASA1) for SIP traffic to a PBX connected on ASA1's inside.ASA1 should also connect a VPN to ASA2, ASA2 has a fixed IP I have not been able to figure out how to initiate the tunnel from the ASA1 to the Sonicwall due to the dynamic IP.
View 3 Replies
View Related
Oct 5, 2012
My internet line is coming directly into HUWAI router and from here its supplying to sonicwall TZ210 WAN port.I have a domain from dyndns.org that is set right now in sonicwall. But when I browse this domain from outsde it opens my HUWAI router login page and I want it to open my SONICWALL login PAGE.
View 2 Replies
View Related
Mar 18, 2013
Which is a better firewall without looking at all the additional services you can purchase on a Sonicwall.
View 19 Replies
View Related
Dec 11, 2012
It's been awhile since work has thrown me a curve ball so I was about due. We've got a client that wants us to log into their secure portal, this is normally not a issue. The link they sent us to their 'portal' apparently takes us to the wrong page. Their solution to this is for us to create a DNS entry to resolve that URL to a specific IP address. We don't currently have a DNS server setup in house so I assumed this would be something done on the Sonicwall.
I asked them why I couldn't just go to the IP address instead of the URL anyway and they said it wouldn't work. Is this something that I can maybe create a NAT Policy for and have it redirect traffic to there? I know the SonicWall has a DNS tab but I've never touched it and I'm not sure what I would need to put in there anyway.
View 7 Replies
View Related
Dec 9, 2012
I'm having a hard time finding which Verizon 3g usb phone cards that will work with a TZ105. How to get it working on a TZ105, what usb phone card you're using and the phone provider. Sonicwall support is telling me there are no verizon cards that will work right now. I have my Sonicwall vendor looking into it, but still haven't heard back from him either. So at this point I'm looking for any USB 3g phone card that is known to work.
View 11 Replies
View Related
Apr 24, 2013
I am looking to setup for BGP with the following conditions:
Client has two 2900 routers, each connecting to a seperate ISP
Client has a Sonic Firewall with a link to each router
Client owns their own /24 block of public IPs and has their own AS Number.
Client has a public /24 and /25 from the corresponding ISPs
Client has supplied the following routing rules they would like to use:
-Anything from their own public subnet should advertize via the two ISP's with best path selection
-Anything from the respective ISP public subnets should use only their link (The ISP's are not auth'd to advertize the other's network)
The two routers are directly connected to eachother and each has a link going to the Sonicwall.
View 5 Replies
View Related
Jan 11, 2012
I have my modem then a switch, and two gateways a Cisco 800, and a sonicwall tz170.The Cisco isn't managed by me, it's on a 172.18.2.x subnet and I only have about 12 addressable IPs.I manage the sonicwall and have all 254 addresses open. The computers have to stay behind the Cisco because it connects to a VPN that the line of business software uses.
I can't connect the two gateways by VPN because I cant control the Cisco.How can I get these two to talk? I have a new server on the sonicwall network and an old server on the Cisco network. I want the computers to be able to see both servers
View 13 Replies
View Related
Apr 5, 2011
How do I block specific domains (pandora.com, etc.) in the Sonicwall? It seems like this would happen in the CFS but do I need a subscription for this? I don't want to subscribe to Sonicwall's filtering list, I just want to block a couple specific domains.
View 9 Replies
View Related
Mar 24, 2011
At work, I am able to connect to sonicwall and log onto SAP.At home, I am able to connect to sonicwall, yet I can't get onto SAP.I am sure that this is a non-SAP related issue because I can use other VPN's to connect to other SAP systems. In control panel -> view network status, sonicwall says 'unidentified network' which I believe is causing the issue. Normally it wouldn't say this
View 1 Replies
View Related
May 10, 2011
I need to replace my old sonicwall firewall. I was looking at the latest Sonicwalls, but they are really expensive if you get all of the services. For the TZ 210 - if I go for just the firmware updates without the gateway security services, how much better of a firewall is it than a Netgear fvs336g?
View 3 Replies
View Related
Dec 17, 2012
Not sure what's going on with this thing. Unfortunately I'm 3 hours away from where it's installed. We put it in place about 3 months ago. It's set to use failover and load balancing. When I installed it I tested the failover and load balancing and everything worked as it should. The past 2 weeks the unit has not been failing over when one ISP drops. This requires a power cycle of unit to get the secondary on X2 to pick up. Data collection is turned off. Probing is turned on for both WAN ports. While both ISP's are up it load balances fine. I was there last week and pulled the patch cables going to the modems and it didn't skip a beat doing a constant ping. Just randomly it takes a shit when one ISP goes down. Takes out the network as well as no internal resources are reachable as well. Can't ping the server from any PC's and such.
It's running an older firmware. 5.5.6 from Nov 2011. 5.8 is currently available. I'm just leery about flashing a new firmware remotely.
Anything like this before with these units? We have plenty of 170's and 180's in place that are trouble free.
View 6 Replies
View Related
Oct 17, 2011
I am looking for a Cisco firewall to replace a Sonicwall NSA240 firewall in SME environment?
View 3 Replies
View Related
Nov 5, 2011
I am trying to setup a VPN tunnel between a Cisco ASA 5510 (Version 8.2(2)) and Sonicwall TZ200. I got tunnel up and going and I am able to ping the Cisco ASA internal IP from the Sonicwall LAN but nothing else works.
When I try to ping a host behind the Cisco ASA from the Sonicwall LAN I get the following message "Asymmetric NAT rules matched for forward and reverse flows;
[code]...
View 14 Replies
View Related
May 24, 2011
I am trying to make an IPSEC tunnell between a 857 and a Sonicwall NSA240.The tunnell goes up but the traffic from the 857 seems to be pushed outside the router to the public internet, not into the tunnel.
Following configuration:
crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 lifetime 28800crypto isakmp key xxxxx address 111.111.111.111 no-xauth!crypto ipsec security-association lifetime seconds 28800!crypto ipsec transform-set xxxx esp-3des esp-md5-hmac!crypto map xxxx 1 ipsec-isakmp description VPN to xxxx set peer 1111.111.1111.111 set security-association lifetime seconds 3600 set transform-set xxxx set pfs group2 match address 115
ip forward-protocol ndip route 0.0.0.0 0.0.0.0 Dialer0!
access-list 115 permit ip 172.28.3.0 0.0.0.255 192.168.22.0 0.0.0.255
If I try a traceroute the traffic is not pushed into the tunel but it seems the it tries to route the traffice over the internet using Dialer0.
View 4 Replies
View Related
Sep 16, 2012
i have one sonicwall NSA 240. it is directly connected to ISP and other interface connected with cisco Layer 2 switch. my que. is that. how to access that sitch remotely ??
sonicwall 1st interface connected with ISP (pubilc IP) and 2nd interface connected with cisco switch with private IP bocz there NAT configuration. i m able to access sonicwall and i m getting ping up to sonicwall bt i cann't able to ping cisco switch.. i think some i need a some missing in sonicwall configution like telnet or VPN
View 1 Replies
View Related
Mar 20, 2011
When I start the installation of sonicwall vpn client 2.4 in Windows 7 that sends me the following message "unable to manage networking component. operating system corruption may be preventing installation".I use the version 2.4 Windows 7 32-bit?
View 2 Replies
View Related
Sep 1, 2011
we got a Sonicwall router and we have been having stability issues. Every 1 minute the TCP connectio is dropped as well as UDP packets. This router is connected to a T1 connection and its requesting a DHCP lease every couple minutes as well. We originally had two WAN connections, and we have disabled the second one because someone thought it was that, but obviously it has to do with the internal network. This is a dual WAN router.
View 4 Replies
View Related
Sep 6, 2012
So my company is replacing firewalls. In our EU HQ, they went with Palo Alto 2020 models to take the place of Cisco PIX and an IBM IDS box.However, as I'm responsible for the US branch, I'm re-evaluating their decision for our office. We currently have a Cisco 5510 and the same IBM IDS box behind it. Everything works, so I'm wondering if a PA device is worth the upgrade cost, but on the other hand, you can't really put a price on security. The application control, IPS, anti-virus, etc etc are all cool features that might be worth implementing now.
My questions is - why is PAN so expensive? As an example, Sonicwall's NSA 3500 with similar specs are coming in at 1/3 the price for the same feature set, and lower yearly cost. I've seen the demos, and the interfaces are both pretty slick - at least compared to what I have now. The all have the gateway security features and Deep Packet Inspection so what am I missing? I know PAN is all the rage right now in the networking world, but it seems like they're somewhat riding the fanaticism from their marketing teams - similar to Apple customers. We could also debate the differences between what's marketed as UTMs and NGFWs, but from the "black box" perspective (what comes in, what goes out) - aren't they more similar than different?
If I ran the office, I'd also look at Untanged and other vendors, but my boss wants something with a little more brand recognition. Anyway - I'm asking the Horde what's up since I'm not a networking guy by trade - more sys admin - but this office is my responsibility.
View 1 Replies
View Related
May 28, 2012
I'm having some problems with a sonicwall pro2040. The problem is this: I can access the sonicwall remotely, and I can ssh into the sonicwall and ping various websites, and get replies, but my connected PCs (Connected by the LAN port) have no internet access. I have never set up a sonicwall before this one, and I feel like there is something I may be missing. Do Sonicwall devices block WAN access by default? Do I need to configure the default route?
View 6 Replies
View Related
Oct 4, 2011
I am trying to bridge a Verizon MiFi4510L to my Sonicwall network router via a Linksys WET610N wireless Internet Bridge. I have successfully gotten the the MiFi4510L to connect to the WET610N and can use the Ethernet connection connected directly to my laptop. I am assigned a DHCP of 192.168.1.6 from the DHCP of the MiFi.I then connected the WET610N connection to the WAN input on the Sonicwall device and connected my laptop to the Sonicwall controlled network. I configured the WAN connection as NAT with DHCP and it connected to the 192.168.1.6 address. However, I can not get to the internet, nor even ping 192.168.1.6 or 192.168.1.1. Something is being blocked (I assume by the Verizon MiFi4510)
View 5 Replies
View Related
