Advertisement

10.12.2008 at 10:17PM PDT, ID: 23808601
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
6.8

Site to site VPN problem between Netgear FVG318 and Sonicwall TZ170

Asked by brothertu in Enterprise Firewalls, Virtual Private Networking (VPN), Networking Hardware Firewalls

Tags: , , ,

Hi, I am having problem to setup site to site VPN between a Netgear FVG318 box and Sonicwall TZ170.
I have followed the manuals of both appliances but failed all the time. I have also searched out a KB article of Sonicwall talking about the trick to setup VPN between Netgear FVS318 and Sonicwall box but that didnt fix my problem.

Any help would be much appreciated.
 
Please find following the details of my configuration and the error logs on both routers as well.
Please feel free to let me know if you need more information.

1. Settings on Sonicwall TZ170
Model: TZ 170 enhanced
Firmware version: SonicOS enhanced 3.1.0.11-30e
Basic network setting:
  WAN IP: 60.x.x.147
  LAN IP: 192.168.0.1/255.255.255.0
General VPN setting:
  "NAT Traversal"  disabled.
  "IKE Dead Peer Detection"  disabled.
  "Enable Fragmented Packet Handling"  enabled
Security Policy:
  IPSec keying mode: IKE using preshared secret
  Name: VPN-sonic
  Ipsec Primary gateway name or address: 201.x.x.26
  Ipsec Secondary gateway name or address: 0.0.0.0
  Shared secret: 0123456789
  Local IKE ID (optional):(I left it blank)
  Peer IKE ID (optional): ( I left it blank)
Local network: 192.168.0.0/255.255.255.0
Remote network: 192.168.200.0/255.255.255.0
IKE (Phase 1) Proposal:
  Exchange: main mode
  DH Group: group 2
  Encryption: 3DES
  Authentication: SHA1
  Life time(seconds): 28800
Ipsec (phase 2) proposal
  Protocol: ESP
  Encryption: 3DES
  Authentication: SHA1
  DH group: group 2
  Life time (seconds): 28800
  Perfect Forward Secrecy: Enabled
Advanced settings:
  Enable keep alive: enabled

2. Settings on Netgear FVG318 :
Model: I reckon this is a FVG318 V2 from the version of firmware
Firmware version: v2.1.2-67R
Basic network setting:
  WAN IP: 201.x.x.26
  LAN IP: 192.168.200.1

IKE Policy settings:
  Direction type: both
  Exchange mode: main
  Local identifier type: local WAN IP
  Local identifier: 201.x.x.26
  Remote identifier type: remote WAN IP
  Remote identifier: 60.x.x.147
IKE SA Parameters:
  Encryption Algorithm: 3DES
  Authentication Algorithm: SHA-1
  Authentication method: Pre-shared key
  Pre-shared Key: 0123456789
  DH group: group 2
  SA-lifetime (sec): 28800
VPN Policy:
  Policy type: Auto policy
  Remote endpoint: (IP address) 60.x.x.26
  Local IP type: subnet
  Local network: 192.168.200.0/255.255.255.0
  Remote IP type: subnet
  Remote network: 192.168.0.0/255.255.255.0
Auto Policy Parameters:
  SA lifetime 28800 seconds
  Encryption Algorithm: 3DES
  Intergirty Algorithm: SHA-1
  PFS key group: DH group 2, enabled

3. VPN log on FVG318:
2008-10-13 : INFO:  accept a request to establish IKE-SA: 60.x.x.26
2008-10-13 : INFO:  Configuration found for 60.x.x.26.
2008-10-13 : INFO:  Initiating new phase 1 negotiation: 201.x.x.147[500]<=>60.x.x.26[500]
2008-10-13 : INFO:  Beginning Identity Protection mode.
2008-10-13 : ERROR:  Invalid SA protocol type: 0
2008-10-13 : ERROR:  Phase 2 negotiation failed due to time up waiting for phase1.
2008-10-13 : ERROR:  Phase 1 negotiation failed due to time up for 60.x.x.26[500].

4.VPN log on TZ170
VPN IKE      IKE Initiator: No response - remote party timeout      
VPN IKE      IKE Initiator: No response - remote party timeout      
VPN IKE      IKE Initiator: Start Main Mode negotiation (Phase 1)      
VPN IKE      IKE negotiation aborted due to timeout      

Start Free Trial
[+][-]10.13.2008 at 07:08AM PDT, ID: 22702535

Assisted solutions are selected by the member who asked the question as a comment that contributed to their question's solution.

Start your 7-day free trial to view this Assisted Solution or ask the Experts your question.

 
[+][-]10.13.2008 at 09:38AM PDT, ID: 22703841

Assisted solutions are selected by the member who asked the question as a comment that contributed to their question's solution.

Start your 7-day free trial to view this Assisted Solution or ask the Experts your question.

 
[+][-]10.14.2008 at 04:07AM PDT, ID: 22710173

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]10.14.2008 at 05:45AM PDT, ID: 22710754

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Enterprise Firewalls, Virtual Private Networking (VPN), Networking Hardware Firewalls
Tags: Netgear, VPN Firewall router, FVG318, Sonicwall
Sign Up Now!
Solution Provided By: brothertu
Participating Experts: 2
Solution Grade: A
 
 
[+][-]10.14.2008 at 07:41AM PDT, ID: 22711710

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]10.14.2008 at 03:29PM PDT, ID: 22716636

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]10.14.2008 at 08:10PM PDT, ID: 22717854

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]10.27.2008 at 03:52AM PDT, ID: 22811218

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]10.28.2008 at 04:43AM PDT, ID: 22820570

Experts Exchange has a courteous staff of administrators who help members get the most out of the website by means of administrative comments like this one.

Start your 7-day free trial to view this Administrative Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 - Hierarchy / EE_QW_2_20070628