Sonicwall tz170 x2 site to site vpn gateway issue
Posted on 2009-05-18
I am having DNS issues with this VPN, the Portal is open, and traffic can flow correctly, the two networks are on different domains, i keep having to use full name resolution i.e. ts.domain1.local and not just ts, using windows VPN i can just use ts. i have set up forward lookup zones on each dns server but it doesnt make any difference.
i also have a problem when connecting to our main site's company web, get the "unauthorised ip". but if i connect locally using windows VPN, all of these issues go away so it has something to do with the 2 sonicwalls.
i have this error popping up every now and then:
24 05/18/2009 11:45:39.736 IKE Responder: IPSec proposal does not match (Phase 2) 220.127.116.11 18.104.22.168 192.168.49.0/24 -> 192.168.50.0/24
25 05/18/2009 11:45:39.736 IKE Responder: No match for proposed remote network address 22.214.171.124 126.96.36.199 192.168.49.0/24
Which is odd as the remote networks are set on both sides to 192.168.50.0 and 192.168.102.0, so i dont know why its trying .49 ?
Thanks for help in advance