Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Sonicwall TZ 150

Posted on 2010-08-24
14
Medium Priority
?
520 Views
Last Modified: 2012-05-10
Hello,

I have set this up for VPN - can get on VPN when on local network but not from outside.

What ports need forwarded to the sonicwall from my DSL Router?
0
Comment
Question by:AUCKLANDIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
14 Comments
 
LVL 33

Accepted Solution

by:
digitap earned 1000 total points
ID: 33517749
do you have a public ip address on the WAN interface of the sonicwall?  if not, then your modem is nat'ing which breaks IPSEC used with VPN connections.  put your dsl modem in transparent bridge mode to accomplish this.  what model of dsl modem do you have.  i'm also suprised that you can connect to the VPN internally.  that usually doesn't work.
0
 
LVL 1

Author Comment

by:AUCKLANDIT
ID: 33517821
I can only connect to the VPN locally if doing via the i.p address of the VPN rather than my remote.mydomain.com

The I.P address I have on the WAN interface is 192.168.1.253 which is the IP of the sonicwall in my routers subnet.

the LAN interface is 10.0.0.254

If I change to transparent mode then it changes the WAN & LAN to the same IP?

0
 
LVL 1

Author Comment

by:AUCKLANDIT
ID: 33517825
DSL Router - AWIRE 2701HGV-W Gateway
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 33

Expert Comment

by:digitap
ID: 33517917
When you put the modem into transparent bridge mode, then the WAN interface takes on the public ip address.  your LAN interfaces stays at the same IP address.  do you have a static ip or is it assigned by your isp using dhcp?  sometimes, the modem will be in bridge mode but still authenticate with PPPoE.  reviewing the manual, it looks like that's what this modem does.  search for bridge mode in the manual.

http://www.2wire.com/pages/pdfs/5100-000326-000.Rev.A.pdf
0
 
LVL 1

Author Comment

by:AUCKLANDIT
ID: 33519811
I don't want to change anything on the modem as its already setup for other port forwards etc.

I did get it working by looking at what inbound ports was coming to it and opening them up, it appears to be an issue around port 500 as the inbound can be a random port but then gets translated to port 500.  What could this issue be as the next time logging in could be a different port so then does not work
0
 
LVL 1

Author Comment

by:AUCKLANDIT
ID: 33520851
does anyone know the list of ports needed fwding to the sonicwall from the dsl router?
0
 
LVL 33

Expert Comment

by:digitap
ID: 33521056
0
 
LVL 8

Assisted Solution

by:jimmyray7
jimmyray7 earned 1000 total points
ID: 33522765
The WAN IP 192.168.1.253 is on a private range, and isn't routable.  This means you won't be able to reach it from the internet.  Do you have a public IP set up that forwards to the sonicwall?

I would put the DSL modem/router in bridged mode and assign the public IP directly to the Sonicwall's WAN interface.  This will make things much easier to manage, with the sonicwall handling all the firewall rules.
0
 
LVL 33

Expert Comment

by:digitap
ID: 33522806
@jimmy :: Do you read previous posts?  Setting to bridge mode has already been suggested and the author has indicated it's not an option.
0
 
LVL 8

Expert Comment

by:dosdet2
ID: 33523155
You are not going to be able to create a stable VPN over the internet without letting the sonicwall have direct access to the a public IP address.  The purpose of a VPN is to connect one local subnet to another local subnet securely across a "public subnet" (internet).    ie: subnet -> internet -> subnet

If the DSL Router is not in bridged mode then you are creating a path of subnet -> subnet -> internet -> subnet.  

The second subnet will not allow the two ending subnets to create a secure connection.  You are going to have to chose between a stable sonicwall VPN (and move your port forwards to the sonicwall) or go with a PC to PC VPN.  You may be able to get the sonicwall to enable a VPN with the DSL router being the gateway, but it will not be stable or secure.  What is the purpose of having a VPN if you have to give up it's security and stability?
0
 
LVL 1

Author Comment

by:AUCKLANDIT
ID: 33525691
Thanks, I have a client who already has this setup with the same DSL modem and same Sonicwall - going to look at all their settings today - will post if some more info comes to light...
0
 
LVL 33

Expert Comment

by:digitap
ID: 33525826
cool...
0
 
LVL 1

Author Comment

by:AUCKLANDIT
ID: 33546714
could not get onto other clients router to look, but copied their sonicwall settings.

I ended up using another DSL router and put the sonicwall in DMZ and it appears to work - just waiting now for the SonicWALL Global VPN Client License to come through from firewalls.com to let it let me on remotely.
0
 
LVL 33

Expert Comment

by:digitap
ID: 33546741
thanks for the points!
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will step through configuring a SonicWALL appliance to utilize an internal DHCP server for Global VPN Client (GVC) hosts.  There are times when using an external (external to the SonicWALL) DHCP server, such as Windows Servers, isn’t pr…
Every server (virtual or physical) needs a console: and the console can be provided through hardware directly connected, software for remote connections, local connections, through a KVM, etc. This document explains the different types of consol…
Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
Suggested Courses

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question