August 30, 2008 01:17am pdt

Member Login

Hall of Fame

Yearly

1RobWill 348,183
2batry_boy 236,734
3lrmoore 165,453
4arnold 118,053
5dpk_wal 72,695
6mwecom... 67,324
7ebjers 44,300
8MrHusy 43,020
9mkielar 42,800
10Qlemo 39,883
11Voltz-dk 35,470
12Cyclops3... 34,840
13TechSoEasy 33,389
14tigermatt 31,325
15keith_ala... 27,046
16trinak96 26,315
17JFrederic... 21,480
18from_exp 21,275
19stuknhaw... 20,075
20rsivanandan 19,950
21rowansmith 19,875
22PeteLong 19,175
23johnb6767 19,122
242PiFL 18,725
25RPPreacher 17,950

	[x] Attachment Details

Sonicwall VPN dropping connection with PPPoE but not with router

Zones: Virtual Private Networking (VPN), Networking Hardware Firewalls, Networking Hardware

Tags: Sonicwall, SonicWALL PRO 1260, 1260, Enhanced OS, version 3.2.3.0-6e

Hello,

I am experiencing a problem with a Sonicwall Pro 1260 with the Enhanced operating system. I have spent lots of time with Sonicwall support with no resolution other then them blaming the ISP. This issue did not happen with the old TZ170 which died and needed replacing.

Symptoms:
--------------
The issue is that when a client running the Global VPN client is connecting the to Sonicwall, it will connect but will drop after anywhere from 30 seconds to 5 minutes. The drop happens pinging a machine on remote network, or doing a Remote Desktop connection or not doing anything in particular (i.e. not traffic specific). The log shows that the client disconnected It will reconnect fine, but will drop again.. This happens when the Sonicwall is doing a PPPoE conneciton to the intenet over DSL. If I put a router between the internet and the Sonicwall, with the WAN using a static IP address (192.168.2.10) then the VPN works flawlessly which I found out by accident from a move a few weeks ago. I thought the issue was with the cable ISP.. This problem was occuring previously using a cable modem at the old location using DHCP to the modem (so It's not the ISP)

Network config:
-------------------
Connection with problem: Switch -> Sonicwall Pro 1260- ppp0e->DSL Modem->Internet

Connection without problem Switch->Sonicwall Pro 1260-> static internal ip->DSL Router-> Internet

VPN client is setup to use DHCP for address 192.168.0.x address. Working router using 192.168.2.x private static address to talk to router (using WAN port of sonicwall). NAT traversal is Forced on for client.

Internet connection has a static IP address assigned.

Opt port is not currently used.

Things I have Tried:
-----------------------
I have tried all the following after reading all the posts about Sonicwalls and other VPN issues:
- Changing the MTU to a lower value based on using ping with -f -l options
- Changing the UDP timeout in advanced settings to be greater then 30 seconds
- Disabling the Detect Dead Peer option
- Enabling fragmented packet handling and ignore the DF bit
- Increasing timeouts and retries in the Sonicwall VPN client settings
- Updating the client to v4.0

After spending many hours trying to fix this, I have run out of things to try. I believe it is related to the sonicwall itself, not the client setup (as using the router works perfectly at the sonicwall side). There are no newer versions of the firmware that I can find on mysonicwall.com. Using the router works, but the router just died and I am back to a connection with just a DSL modem, so I need this to work and I am sure that this works for the thousands of other Sonicwall users out there.

Any help would be appreciated.

Start your free trial to view this solution

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.0

Question Stats

Zone: Software

Question Asked By: johnthewolf

Solution Provided By: rogle

Participating Experts: 5

Solution Grade: B

Translate:

Loading Advertisement...

Open Discussion

Comment by lvprince

johnthewolf:
Its as if you are me.... Please, for the love of all geekiness, can you tell me your MTU settings, or something. I promise you, as sure as I type in the wii (pun intended) hours of the night, this problem is killing me softly. I am running and have always ran the standard version. I have the TZ180. I've replaced the original failing unit, only to have the second one make me look totally retarded. Please Please Please if you can let me know what settings you have configured, without revealing any critical information, I would greatly appreciate it. I don't think its by accident that we are each having this problem either. I wonder if I went to Enhanced, would it work for me in reverse? Please JTW, help!

20080723-EE-VQP-34 / EE_QW_2_20070628