Solved

Sonicwall VPN Global client reports connected but cannot get IP address from remote network.

Posted on 2009-05-09
4
7,779 Views
Last Modified: 2012-05-06
A user can connect to the office VPN (have sonicwall TZ170) but cannot get an IP address. (therefore if you ping any IP address on the remote network it fails)

the log shows Failed to receive an incoming ISAKMP packet. The length is incorrect.

All other users can connect to the office fine as can I with this particular users credentials.

This problem user uses the Global VPN client to connect to the office. This reports Connected as normal and seems fine. However the user does not seem to get an IP address from the remote network.
when I check the SonicWall VPN adaptor under the Windows XP Network connecions I noticed it is disabled. If I try enable it.
Enabling& and then soon after Connection Failed.

I check the Sonicwall log and it repeatedly has this error.
Failed to receive an incoming ISAKMP packet. The length is incorrect.

Now I have previously had issued with VPN and changing the MTU size resolved it. This users current MTU is 1462. I think before I changed it to 1500 and this fixed it. I dont want to change the MTU size now as Im worried this will kick the user out from his broadband connection and he wont be able to reconnect to his router as he does not have an Ethernet cable. I do not want to bring down his internet over the weekend as then I would have made things worse.

I also note the user is on an unencrypted wireless connection and even his router has the default password set. I dont think this could be anything to do with it but thought I would mention it.

Any ideas?
0
Comment
Question by:afflik1923
  • 2
  • 2
4 Comments
 
LVL 23

Accepted Solution

by:
ComputerTechie earned 500 total points
ID: 24343487
I change to Nat router setting also is this router the same as others on network. I would also try changing out the router.

CT
0
 

Author Comment

by:afflik1923
ID: 24405802
Think we have focused down the problem to the users router. Worked fine in other places (although only quick tests) and when he uses an ehternet cable at home all seems fine (again not long tests yet)
Was wondering if it could be related to his thinkpad at all and the various wireless profile settings (I notice they have VPN settings). Most users do not use thinkpads.

Also changed the MTU to 1500.

Do note sometimes the wireless does work at home even before the changes.
0
 
LVL 23

Assisted Solution

by:ComputerTechie
ComputerTechie earned 500 total points
ID: 24406406
if possible i would clear out the other wireless profiles and setup one just for this then setup another for travel.

I would also see if there is an updated driver for the lbm thinkbook wireless card.

CT
0
 

Author Closing Comment

by:afflik1923
ID: 31579752
Never got to the true bottom of this but I user has not complained since changing the MTU to 1500 and setting up a new secure wireelss profile.
So assume it was local router / wireless related.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now