The VPN tunnel between Office 1 and Office 2 is functioning.
The VPN tunnel Office 1 and HomeOffice has been established, BUT I cannot ping any subnets across the tunnel. I have tried different settings, and will post the current configuration later.
this setup and can post their respective settings.
The VPN tunnel between Office 1 and Office 2 is functioning.The VPN tunnel Office 1 and HomeOffice has been established, BUT I cannot ping any subnets across the tunnel. I have tried different settings, and will post the current configuration later.
I am attempting to get a NAT connection to work through a Sonicwall TZ200 to a VLAN defined on a Cisco 3750 switch. So far I have not been able to get it to work. I am able from the VLAN to access the internet and devices on another VLAN.
I have reviewed the configuration of the Sonicwall with Sonicwall support. They checked and see no issue with the configuration. I have the NAT gateway set to the vlan gateway IP address.
Are there any particular configuration options that I need to set on the 3750 switch in order to be able to route the traffic from the internet to the VLAN?
I have a side gig that I do some work for and they've had a Sonicwall TZ200 device in their branch office and also in their data center that has a site to site VPN connection between the two devices. About a month ago the bandwidth throughput got severly decreased. They went from getting about 28Mbps/27Mbps to now ~3Mbps/12Mbps.
I've spent days troubleshooting with Sonicwall which could be a whole dedicated thread on it's own but I digress. I even had the ISP come out and test the line and when they hooked up their own laptop it got the speeds it should be getting. I've rebuilt the config on the sonicwall from scratch which was a major pain in the ass because I'm not a firewall guy by any means. After firmware updates and pulling my hair out I've decided to dump the tz200, to what I don't know. I need two devices, one for the data center and one for the branch office. I'm pretty sure something in the config is causing this and after being escalated to the highest level at sonicwall and them sending me a replacement unit which I rebuilt the config on and also tried to import the old settings with no luck. I very well could have done something or made a change to cause this but I'm at a loss and willing to try another product.
I get spammed from Barracuda all the time, do they have quality devices? Something with a web interface would be great since I'm not a firewall guru by any means and had set up a bunch of address objects with NATs and all that.
I have two CISCO 2800 routers tied together over a Metro Ethernet bewteen an HQ location and a Colocation facility. There are multiple subnets on both sides of the MAN. All things work in this regard.
I added two new Interfaces to the routers to create a VPN failover should the above MAN go down. I use IP SLA to track the MAN, then move to the VPN route when reachability is down.
I can source ping from one CISCO router Interface to the other, through the two interfaces to the Sonicwalls and reach the router interface of the CISCO on the other side of the VPN tunnel.
Problem: I can not ping any subnet behind the interface I ping through the Sonicwall VPN tunnel?
Example 2800 G0/2 interface 100.1.1.41 /30 through Sonicwal over Internet to other Sonicwall and out ot the G0/2 100.1.10.41 /30 interface on the other 2800 router. Ping is fine.
I am building the VPN with Sonicwall and Cisco Router, the VPN status is indicated ok on the Sonicwall and able to ping only,I know it required ACL on Cisco but it failed, I cannot ping the sonicwall from cisco, the access from external to cisco internal is also fail.
Site A SonicWall = 192.168.1.0Site B (Cisco) = 192.168.143.0
We have a several SonicWall TZ 190 establishing VPN tunnels with a ASA5520. Pericodically random VPN tunnels will drop and can not re-establish a connection. In order to re-establish the dropped VPN tunnel, our firewall folks manually drop all VPN tunnels connected to the ASA (they use to physically power cycle the ASA). They claim this is the only way to resolve the problem and since the SonicWall Life Time seconds for Phase 1 and 2 are set to 28800, they reset the tunnels every 8 hours. Additionally, they claim that SonicWall IPSEC is different that Cisco IPSEC which is the main problem. Hence they are requesting a SONICWAll VPN concentrator..
My SIP trunk provider uses a SonicWall Pro 3060, I need to initiate a IPSec VPN tunnel from an ASA 5505 (ASA1) for SIP traffic to a PBX connected on ASA1's inside.ASA1 should also connect a VPN to ASA2, ASA2 has a fixed IP I have not been able to figure out how to initiate the tunnel from the ASA1 to the Sonicwall due to the dynamic IP.
My internet line is coming directly into HUWAI router and from here its supplying to sonicwall TZ210 WAN port.I have a domain from dyndns.org that is set right now in sonicwall. But when I browse this domain from outsde it opens my HUWAI router login page and I want it to open my SONICWALL login PAGE.
It's been awhile since work has thrown me a curve ball so I was about due. We've got a client that wants us to log into their secure portal, this is normally not a issue. The link they sent us to their 'portal' apparently takes us to the wrong page. Their solution to this is for us to create a DNS entry to resolve that URL to a specific IP address. We don't currently have a DNS server setup in house so I assumed this would be something done on the Sonicwall.
I asked them why I couldn't just go to the IP address instead of the URL anyway and they said it wouldn't work. Is this something that I can maybe create a NAT Policy for and have it redirect traffic to there? I know the SonicWall has a DNS tab but I've never touched it and I'm not sure what I would need to put in there anyway.
I'm having a hard time finding which Verizon 3g usb phone cards that will work with a TZ105. How to get it working on a TZ105, what usb phone card you're using and the phone provider. Sonicwall support is telling me there are no verizon cards that will work right now. I have my Sonicwall vendor looking into it, but still haven't heard back from him either. So at this point I'm looking for any USB 3g phone card that is known to work.
I am looking to setup for BGP with the following conditions:
Client has two 2900 routers, each connecting to a seperate ISP Client has a Sonic Firewall with a link to each router Client owns their own /24 block of public IPs and has their own AS Number. Client has a public /24 and /25 from the corresponding ISPs Client has supplied the following routing rules they would like to use: -Anything from their own public subnet should advertize via the two ISP's with best path selection -Anything from the respective ISP public subnets should use only their link (The ISP's are not auth'd to advertize the other's network)
The two routers are directly connected to eachother and each has a link going to the Sonicwall.
I have my modem then a switch, and two gateways a Cisco 800, and a sonicwall tz170.The Cisco isn't managed by me, it's on a 172.18.2.x subnet and I only have about 12 addressable IPs.I manage the sonicwall and have all 254 addresses open. The computers have to stay behind the Cisco because it connects to a VPN that the line of business software uses.
I can't connect the two gateways by VPN because I cant control the Cisco.How can I get these two to talk? I have a new server on the sonicwall network and an old server on the Cisco network. I want the computers to be able to see both servers
How do I block specific domains (pandora.com, etc.) in the Sonicwall? It seems like this would happen in the CFS but do I need a subscription for this? I don't want to subscribe to Sonicwall's filtering list, I just want to block a couple specific domains.
At work, I am able to connect to sonicwall and log onto SAP.At home, I am able to connect to sonicwall, yet I can't get onto SAP.I am sure that this is a non-SAP related issue because I can use other VPN's to connect to other SAP systems. In control panel -> view network status, sonicwall says 'unidentified network' which I believe is causing the issue. Normally it wouldn't say this
I need to replace my old sonicwall firewall. I was looking at the latest Sonicwalls, but they are really expensive if you get all of the services. For the TZ 210 - if I go for just the firmware updates without the gateway security services, how much better of a firewall is it than a Netgear fvs336g?
Not sure what's going on with this thing. Unfortunately I'm 3 hours away from where it's installed. We put it in place about 3 months ago. It's set to use failover and load balancing. When I installed it I tested the failover and load balancing and everything worked as it should. The past 2 weeks the unit has not been failing over when one ISP drops. This requires a power cycle of unit to get the secondary on X2 to pick up. Data collection is turned off. Probing is turned on for both WAN ports. While both ISP's are up it load balances fine. I was there last week and pulled the patch cables going to the modems and it didn't skip a beat doing a constant ping. Just randomly it takes a shit when one ISP goes down. Takes out the network as well as no internal resources are reachable as well. Can't ping the server from any PC's and such.
It's running an older firmware. 5.5.6 from Nov 2011. 5.8 is currently available. I'm just leery about flashing a new firmware remotely.
Anything like this before with these units? We have plenty of 170's and 180's in place that are trouble free.
I am trying to setup a VPN tunnel between a Cisco ASA 5510 (Version 8.2(2)) and Sonicwall TZ200. I got tunnel up and going and I am able to ping the Cisco ASA internal IP from the Sonicwall LAN but nothing else works.
When I try to ping a host behind the Cisco ASA from the Sonicwall LAN I get the following message "Asymmetric NAT rules matched for forward and reverse flows;
I am trying to make an IPSEC tunnell between a 857 and a Sonicwall NSA240.The tunnell goes up but the traffic from the 857 seems to be pushed outside the router to the public internet, not into the tunnel.
Following configuration:
crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 lifetime 28800crypto isakmp key xxxxx address 111.111.111.111 no-xauth!crypto ipsec security-association lifetime seconds 28800!crypto ipsec transform-set xxxx esp-3des esp-md5-hmac!crypto map xxxx 1 ipsec-isakmp description VPN to xxxx set peer 1111.111.1111.111 set security-association lifetime seconds 3600 set transform-set xxxx set pfs group2 match address 115
ip forward-protocol ndip route 0.0.0.0 0.0.0.0 Dialer0! access-list 115 permit ip 172.28.3.0 0.0.0.255 192.168.22.0 0.0.0.255
If I try a traceroute the traffic is not pushed into the tunel but it seems the it tries to route the traffice over the internet using Dialer0.
i have one sonicwall NSA 240. it is directly connected to ISP and other interface connected with cisco Layer 2 switch. my que. is that. how to access that sitch remotely ??
sonicwall 1st interface connected with ISP (pubilc IP) and 2nd interface connected with cisco switch with private IP bocz there NAT configuration. i m able to access sonicwall and i m getting ping up to sonicwall bt i cann't able to ping cisco switch.. i think some i need a some missing in sonicwall configution like telnet or VPN
When I start the installation of sonicwall vpn client 2.4 in Windows 7 that sends me the following message "unable to manage networking component. operating system corruption may be preventing installation".I use the version 2.4 Windows 7 32-bit?
we got a Sonicwall router and we have been having stability issues. Every 1 minute the TCP connectio is dropped as well as UDP packets. This router is connected to a T1 connection and its requesting a DHCP lease every couple minutes as well. We originally had two WAN connections, and we have disabled the second one because someone thought it was that, but obviously it has to do with the internal network. This is a dual WAN router.
So my company is replacing firewalls. In our EU HQ, they went with Palo Alto 2020 models to take the place of Cisco PIX and an IBM IDS box.However, as I'm responsible for the US branch, I'm re-evaluating their decision for our office. We currently have a Cisco 5510 and the same IBM IDS box behind it. Everything works, so I'm wondering if a PA device is worth the upgrade cost, but on the other hand, you can't really put a price on security. The application control, IPS, anti-virus, etc etc are all cool features that might be worth implementing now.
My questions is - why is PAN so expensive? As an example, Sonicwall's NSA 3500 with similar specs are coming in at 1/3 the price for the same feature set, and lower yearly cost. I've seen the demos, and the interfaces are both pretty slick - at least compared to what I have now. The all have the gateway security features and Deep Packet Inspection so what am I missing? I know PAN is all the rage right now in the networking world, but it seems like they're somewhat riding the fanaticism from their marketing teams - similar to Apple customers. We could also debate the differences between what's marketed as UTMs and NGFWs, but from the "black box" perspective (what comes in, what goes out) - aren't they more similar than different?
If I ran the office, I'd also look at Untanged and other vendors, but my boss wants something with a little more brand recognition. Anyway - I'm asking the Horde what's up since I'm not a networking guy by trade - more sys admin - but this office is my responsibility.
I'm having some problems with a sonicwall pro2040. The problem is this: I can access the sonicwall remotely, and I can ssh into the sonicwall and ping various websites, and get replies, but my connected PCs (Connected by the LAN port) have no internet access. I have never set up a sonicwall before this one, and I feel like there is something I may be missing. Do Sonicwall devices block WAN access by default? Do I need to configure the default route?
I am trying to bridge a Verizon MiFi4510L to my Sonicwall network router via a Linksys WET610N wireless Internet Bridge. I have successfully gotten the the MiFi4510L to connect to the WET610N and can use the Ethernet connection connected directly to my laptop. I am assigned a DHCP of 192.168.1.6 from the DHCP of the MiFi.I then connected the WET610N connection to the WAN input on the Sonicwall device and connected my laptop to the Sonicwall controlled network. I configured the WAN connection as NAT with DHCP and it connected to the 192.168.1.6 address. However, I can not get to the internet, nor even ping 192.168.1.6 or 192.168.1.1. Something is being blocked (I assume by the Verizon MiFi4510)
Here's what I have WAN->SonicWall->E1200 Basically the E1200 is given a static IP for it's WAN that is in the range of the Sonic Wall's DMZ interface, and the DMZ interface is the default gateway of the E1200. When wireless clients connect to the E1200 they get internet access with no issues and they are on a separate network (which is intended). The issue I have is if I get on a computer that is on the Sonic Wall's LAN network, which is able to route to the DMZ network, I am unable to ping the E1200 or perform remote management (turned on in the E1200). There are phone devices that are on the DMZ network that I can ping from the LAN network. I need to be able to remotely manage the E1200?
I am installing a Sonicwall TZ180 at my home and can't get my Linksys WRT160N to work with it. I lost the antennas to the Sonicwall TZ180, so I am having to use the wireless from the WRT160N. The Sonicwall works just fine and I can get to the internet through it, when I plug my computer into it, but I cannot get the Linksys to connect to the Sonicwall, to use the wireless.
How to configure the Linksys to talk to the Sonicwall? I've googled it without much success.
I'm currently trying to diagnose a re-occuring problem with output drops on an uplink interface to a SonicWALL firewall, between 1am - 3am every night we receive alerts that the output drops (discards) counter has incremented.
This time frame happens to be when several network based backups are running so that's probably to blame for the added traffic count but I'm trying to narrow down what's actually dropping the traffic.
The switch hardware is a WS-C3750X-48 running C3750E-UNIVERSALK9-M , 12.2 (55) SE3.
My current thinking is that the output drops are indicative of congestion on the link to the SonicWALL indicating that the SonicWALL unit is incapable of processing the traffic flow fast enough thus causing the congestion and ultimately the output drops on the Gi2/0/48 interface.
According to SonicWALL the unit is rated at 1.5Gbps throughput without UTM services (pure stateful), and no UTM services are enabled.
I've posted a section of the show interface command:
Keepalive set (10 sec) Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported
I am doing a comparative between cisco and sonicwall routers. Which router would better fit me? i need it to support at least a 20MB internet connection in a datacenter and has to have a firewall included. I was thinking about a router 1941. What do you think ?
Sonicwall TZ 180 router/firewall LAN and WLAN is configured on different subnets (just the way it is setup) and any devices on either network can not see shares/printers etc on the other network through the same device.from what i can tell, i have all the necessary port forwards/AccessRules setup for WLAN and LAN to communicate together but, it is just not working properly. What the exact settings are to ensure the LAN and WLAN devices communicate to each other.
I have a Cisco ASA 5502 and a Sonicwall TZ-210.The ASA is Office A and the Sonicwall is Office B.
Office A and Office B have a site to site vpn setup and people connected to either network can access resources on both networks.
people in Office A use the Cisco Anyconnect client, which is on a different subnet than the office A network, to vpn into office A. they can access resources in Office A but not Office B.
from what I can tell by looking at the split tunnel rules for the Cisso anyconnect client and the ACL’s on the ASA 5505 the Office B network is listed in the correct places.I I created an address group and had the Subnet for Office A and the anyconnect client for Office A to the group and set that as my remote network on the TZ-210 but no go…
I did some searching around on the forums and the interwebs, but all I found was Cisco to Cisco stuff when it came to the anyconnect client or site to site VPN to Sonicwall.. didn't find much on the anyconnect client over the site to site with a sonicwall.
