October 11, 2008 06:50pm pdt

My Account

Top 15 Experts

Overall Top Experts

1RobWill 1,547,640
2lrmoore 1,059,686
3batry_boy 416,944
4grblades 215,434
5rsivanandan 156,746
6dpk_wal 135,395
7arnold 133,803
8TechSoEasy 112,468
9calvinetter 112,055
10mwecom... 88,949
11keith_ala... 86,935
12MrHusy 77,294
13tim_holman 75,964
14Qlemo 74,953
15Cyclops3... 72,785

	[x] Attachment Details

Global VPN will not require IP address

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.4

Zones: Virtual Private Networking (VPN), Networking Hardware Firewalls, Dynamic Host Configuration Protocol (DHCP)

Tags: Sonicwall, Global VPN Client, TZ170

For whatever reason, my sonicwall Global VPN Client will not aquire an IP address for the virtual adapter. It does connect successfully and the handshaking and such goes well. My Sonicwall log shows no errors but you can definitly see in the VPN client where it just hangs on aquiring IP address.

DHCP is setup to do DHCP through VPN, in that dialog I have added my DHCP server as the relay to server.

Heres my log of me connecting, waiting a few seconds while it just aquires then hangs. Once it hangs I hit delete and it disconnects.

07/02/2008 21:32:40.384 User logged out 24.178.186.243, 0, WAN 192.168.1.1, 0, LAN luscoma, TCP Port: 0
4 07/02/2008 21:32:40.384 Received IPSEC SA delete request 24.178.186.243, 60998 65.15.145.129, 500 SPI:0xd922743a
5 07/02/2008 21:32:36.848 IKE negotiation complete. Adding IPSec SA. (Phase 2) 65.15.145.129 24.178.186.243 ESP:3DES, HMAC_SHA1, lifeSeconds=28800 Local SPI:0xf81b9ffa Remote SPI:0xd922743a
6 07/02/2008 21:32:36.848 IKE Responder: Accepting IPSec proposal (Phase 2) 24.178.186.243 65.15.145.129 0.0.0.0/0 -> 0.0.0.0/0
7 07/02/2008 21:32:36.768 IKE Responder: Received Quick Mode Request (Phase 2) 24.178.186.243, 61004 65.15.145.129, 500
8 07/02/2008 21:32:36.656 VPN Client Policy Provisioning 24.178.186.243 65.15.145.129 Client Policy Synchronized
9 07/02/2008 21:32:36.512 XAUTH Succeeded with VPN client 24.178.186.243 65.15.145.129 luscoma
10 07/02/2008 21:32:36.432 WAN zone remote user login allowed 24.178.186.243, 0, WAN 192.168.1.1, 0, LAN luscoma, TCP Port: 0
11 07/02/2008 21:32:36.352 IKE Responder: Aggressive Mode complete (Phase 1) 24.178.186.243, 60998 65.15.145.129, 500 3DES SHA1 Group 2 lifeSeconds=28800

At one point I had site to site VPN working where the DHCP was relayed through the VPN so I am pretty confident that the relay is correct and working. What causes this? I've tried turning on and off NAT transversal AND if i set a static ip address to the virutal adapter it connects and I am able to ping my LAN.

Id really rather have DHCP working though for sure.

Any ideas?

	#	Title
	1	Cisco PIX VPN and NAT
	2	IPSec VPN
	3	VPN to pix 506e NAT issue
	4	Where is the VPN Overhead in an IPSe…
	5	Cisco SSL VPN - NAT problems
	6	General question about getting a VPN t…