• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1412
  • Last Modified:

Can't get site-to-site VPN to work between Sonicwall PRO3060 and Cisco router

I have a Sonicwall Pro3060 and a Cisco EPC2425 router. I have setup a site-to-site VPN and it won't connect. All the settings are the same on both ends and the security matches, but on the Cisco I can see:

Failed ESP packet internal IP on CIsco subnet > internal IP on Pro3060 subnet
PatcketEncapsulate failed with error bad sequence number

Then in the Sonicwall logs I don't really see anything.

When I'm setting up the VPN on the Cisco end it gives me the option to automatically use the WAN IP, but when this is ticked I get an IP address that starts with 10.x.x.x. However, if you go to whatsmyip.com and run that from one of the computers behind it it gives you something with 95.x.x.x.
  • 2
1 Solution
"Then in the Sonicwall logs I don't really see anything."
The Sonicwall's logging of attempted VPN connections is very comprehensive.  Every step in the sequence of establishing the VPN connection (success or failure) should generate a log entry.  If you don't see anything, check your SW log setup & filters etc.  There must be some clues there.

Go to Log > Categories and make sure the settings are as the screen shot shows.  IT-Monkey is right.  The log should show the VPN negotiation all the way through.
willlandymoreAuthor Commented:
yeah, it just wasn't giving any good errors because it was failing on the very first step. However, I got them to open the Cisco device on the other end for me and found that the VPN settings were matching but that they had used on the WAN interface for the SM. I don't know how they were getting internet with this but it's almost certainly why things are off in this scenario.
If they were given a single public IP, I think represents a single host IP.  Not sure though how a Cisco should be configured in this scenario...sounds like I'm not the only one >GRIN<!  Anywho, are you indicating that the issue is resolved?
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now