?
Solved

Sonicwall Global VPN Client does not get an IP

Posted on 2010-01-13
8
Medium Priority
?
832 Views
Last Modified: 2012-08-13
I installed GVC on a windows vista machine.  The connection setup perfectly and I was able to connect with the shared secret and login with the user profile.  The virtual adapter however, never gets an ip.  We do not use a dhcp server.  However, I enabled DHCP and created a 3 ip scope on the sonicwall for testing purposes. Virtual Adapter Settings on the sonicwall device is set for dhcp lease.  DHCP over VPN has been configured. I selected Central Gateway and checked of use internal DHCP Server and checked of For global VPN Client.
0
Comment
Question by:rrincones
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 15

Expert Comment

by:bignewf
ID: 26331850
I have seen this with some GVC client versions. In some versions of the GVC with Vista, I had to hard code an ip on the virtual adapter to connect. You might uninstall and try another version of the GVC
0
 

Author Comment

by:rrincones
ID: 26359304
I tried an older version of gvc on a windows xp pc and did not get an ip.  On the vista pc with the newer version I hard coded an ip address but could not ping any devices on the corporate network.  Is there a rule that prevents the ping?
0
 
LVL 15

Expert Comment

by:bignewf
ID: 26359427
you will have to check the sonicwall to see if icmp is blocked into the lan subnets from the vpn client ip pool. However, did you check to see if you access a shared drive, or internal website?

can you ping this ip from inside the lan to this vista pc?

recheck the access rules for the vpn client ip pool to the internal lan subnets on the sonicwall
0
Need protection from advanced malware attacks?

Look no further than WatchGuard's Total Security Suite, providing defense in depth against today's most headlining attacks like Petya 2.0 and WannaCry. Keep your organization out of the news with protection from known and unknown threats.

 
LVL 15

Expert Comment

by:bignewf
ID: 26359437
also, recheck all firewalls on this pc- i.e windows, mcafee, symantec, zone alarm,  etc
0
 

Author Comment

by:rrincones
ID: 26383088
"recheck the access rules for the vpn client ip pool to the internal lan subnets on the sonicwall"
"VPN client IP pool"  

Is that seperate from just enabling DHCP on Sonicwall and checking on "use internal DHCP server"?

I do not see a rule that blocks icmp, but do I need to set a rule to allow it?  If so, do I use port 500?
0
 
LVL 15

Expert Comment

by:bignewf
ID: 26392126
"recheck the access rules for the vpn client ip pool to the internal lan subnets on the sonicwall"
"VPN client IP pool"  

the above is the most import rule -- which allows any dhcp address handed out from the sonicwall to a global client to access the internal lan subnet. This is a seperate configuration,

Best bet is to post screenshots of your entire vpn  and dhcp config and we can fix this
0
 

Author Comment

by:rrincones
ID: 26514443
Sorry about the late post.  As it turned out the problem was with the packets being rejected on the client side without notice to gvc.  There is a document on Sonicwall's website discussing this problem.  I had to change a setting on the client software from automatic to disable NAT Traversal.

The article name is "VPN: Failed to Obtain DHCP Lease for the Virtual Adapter".

I was able to connect and access resources on the lan.  However, after a few reboots, I started to receive an error stating that it could not find the IP on the next hop and an error before that stating it could not find the mac address of the sonicwall.  

Some suggestions on this problem are to remove the client software and run the cleanup utility.  Update the drivers for the NIC card's and reinstall the software.

There is also a document stating issues connecting with Global VPN Client software using a wireless adapter.  

I will post the results soon.
0
 

Accepted Solution

by:
rrincones earned 0 total points
ID: 27059620
Turns out the problem was with the wireless nic card.  Connecting the laptop to an ethernet cable fixed the problem and gvc connected successfully each time.  I was also able to access shared network resources.  

We dont use dhcp so I manually configured an IP address on the windows network connection created by gvc.  
0

Featured Post

Create the perfect environment for any meeting

You might have a modern environment with all sorts of high-tech equipment, but what makes it worthwhile is how you seamlessly bring together the presentation with audio, video and lighting. The ATEN Control System provides integrated control and system automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

741 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question