Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Sonicwall Pro 2040 VPN client connection

Posted on 2006-11-02
4
466 Views
Last Modified: 2010-04-12
Hello Experts,

I have tried to configure VPN on my Sonicwall Pro 2040 with SonicOS Standard 3.1.0.7-77s. Problem is that my office network is 192.168.xxx.xxx.  But when i use the Global VPN client, im getting a message that im getting connected successfully to my sonicwall, but im getting an IP allocated which is like 213.1.1.128 and obviously i cannot connect to any of my servers. I thought i should get a 192.168.xxx.xxx address.

Let me give you the configuration I have done and maybe you can point out where i am going wrong.

Under VPN - Settings tab, i have used pretty much most of the default settings in the default Group VPN policy.

Under 'Advanced' tab settings, these are the options that i have chosen..

 Disable all VPN Windows Networking (NetBIOS) Broadcasts  
 Enable Fragmented Packet Handling  
 Ignore DF (Don't Fragment) Bit    
 
 Enable NAT Traversal  
 Enable IKE Dead Peer Detection
 Clean up Active tunnels when Peer Gateway DNS name resolves to a different IP Address  

Under DHCP over VPN tunnel tab,

Central Gateway configuration:

Send DHCP requests to the server addresses listed below (select this option and given our internal DHCP server's address)

The above options are the ones pretty much that i have configured under VPN settings..

Now i tried to connect using Global VPN client and i got a message that im succesfully connected to the IP address of the sonicwall, now instead of getting a 192.168.xxx.xxx which is the internal LAN address of our office network, im getting some IP address like 213.1.1.128. I just dont get it why im getting an IP like that. I cant obviously connect to any of the servers in my office. Can someone please tell me what i should be checking or correcting as im not very much familliar with firewalls and vpn, infact this is the first time im configuring a vpn. So i would really appreciate any help to solve my problem.

thank you
vamsi


0
Comment
Question by:vamsi_uk
  • 3
4 Comments
 
LVL 7

Accepted Solution

by:
jasonpaine earned 250 total points
ID: 17862910
on the vpn setting page check the two boxes to enable vpn
under group vpn on the advanced tab > check require authentication of vpn ...
on Client page >  cache xauth > single session
virtual adapter setting > dchp lease

create a local user on users page in the sonicwall
fill in user name password and check give access to vpn's and access from vpn client with xauth

Central Gateway configuration:

Send DHCP requests to the server addresses listed below (select this option and given our internal DHCP server's address)
use this if using windows server as dhcp server
0
 
LVL 4

Author Comment

by:vamsi_uk
ID: 17865309
Hi Jason,

I have done all the settings initially except the "DHCP lease in virtual adapter settings" and that is what was causing problem all the while. Now im getting a 192.168.xxx.xxx address and im able to ssh and ping to my local servers. However, there seems to be a small glitch now, im able to ping and ssh by ip addresses, but not by using hostnames. Is this anyway related to sonicwall,can you think of anything that might be causing this problem?

thank you
Vamsi
0
 
LVL 7

Expert Comment

by:jasonpaine
ID: 17867295
Glad I could help.
0
 
LVL 7

Expert Comment

by:jasonpaine
ID: 17873555
Do you have your DNS settings configured in the sonicwall?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Linksys LRT 224 forward 3 44
How do I restrict App Service access to specific IPs (i.e. firewall)? 4 71
SRX240 SYSLOG Setting 6 119
Windows Server Firewall Configuration 2 58
Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question