Solved

Sonicwall, PRO3060, VPN traffic going only one way

Posted on 2007-08-08
4
720 Views
Last Modified: 2013-11-05
I have a VPN tunnel going from a TZ170 to a PRO 3060 and eveything seems okay at first. The tunnel is coming up green on both ends and I can ping from the TZ170 to the 3060. However, if I try to ping the other way it fails.
When I go into the diagnostics on the 3060 if I do a packet trace going from my computer behind the 3060 to the LAN address of the TZ170, it shows it as being successful. The logs on the 3060 are showing the ping as:
source: TZ170
destination: PRO3060
destination unreachable.

So it's like the ping is going out successfully but then on the return it's getting blocked by the 3060. I've tried making a rule to allow all communication from the TZ170, but it still fails.

I've also lowered the MTU and adjusted it to match on both sides, deleted and recreated the rule for the SA, etc, etc.
Can anyone tell me why the ping would fail but packet trace is showing successful? I need the tunnel to work both ways.. :)
0
Comment
Question by:wlandymore
  • 2
4 Comments
 
LVL 10

Accepted Solution

by:
budchawla earned 250 total points
ID: 19671672
Have you got authentication required for the tunnel on the TZ170?
0
 
LVL 1

Author Comment

by:wlandymore
ID: 19672147
Nice.

I added authentication to the list of exempted services on both sides and it started coming up for ping, etc.

Thanks...I never would have thought of that.
0
 
LVL 10

Expert Comment

by:budchawla
ID: 19674031
Glad to help :-)
0
 

Expert Comment

by:humancap
ID: 20700804


(Quote)I added authentication to the list of exempted services on both sides and it started coming up for ping, etc.

Thanks...I never would have thought of that(Quote)

Sorry to bother you but could you tell me how you added authentication to the list of exempted service?
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
Network traffic routing plays key role in your network, if you have single site with heavy browsing or multiple sites, replicating important application data from your Primary Default Gateway ,you have to route your other network traffic from your p…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now