Solved

Site to Site VPN connection to secondary WAN interface on Sonicwall 4500

Posted on 2011-03-09
7
1,485 Views
Last Modified: 2012-05-11
Experts,

Currently I have 2 WAN connections coming into my sonicwall 4500.  One is a T1 line and the other is a newly installed fiber connection with the same ISP.  Now there is a third connection that the current site-to-site vpn's are authenticating to that they will be moving from.  

The issue that I am having is that when I create the vpn policy on the sonicwall 4500 and the remote site (sonicwall tz100 and another site with a tz150), the tunnel will only authenticate with the T1 connection that will be dropped for obvious reasons.  Currently i am sending traffic out the T1 with the fiber sitting idle save for specific GVC clients.Management would like to have a slow migration over to the new circuit with as little down time as possible.  Remote users connecting via the GVC to the new circuit have no issues.  The moving of the site-to-site vpn's is the first step in a long line of migrations.

Question:
How can I get site-to-site vpn's to authenticate with the secondary ip address on the sonicwall 4500 knowing the above information?


Thanks in advance.
0
Comment
Question by:jmhmis
  • 4
  • 3
7 Comments
 
LVL 33

Accepted Solution

by:
digitap earned 500 total points
ID: 35086759
change the primary IP specified in the remote sonicwall's vpn policies for the fiber public IP. then, change the vpn policy on the 4500 to bind to the secondary WAN interface where you have the fiber connected. you can change this setting in the last tab of the vpn policy.

is that the response you were looking for?
0
 

Author Comment

by:jmhmis
ID: 35087236
It's possible.  Let me check on it.  I will get back to you.
0
 

Author Comment

by:jmhmis
ID: 35087380
I don't see the ip field for the remote sonicwall's vpn policies.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 33

Expert Comment

by:digitap
ID: 35087446
edit the vpn policy back to the main site. you should have two fields where you can enter the public IP for the main site. see my screen shot.
greenshot-2011-03-09-14-30-18.jpg
0
 

Author Comment

by:jmhmis
ID: 35087689
To my understanding that that is where you are connecting to.  The issue is that it's on the main firewall that is not accepting it on the X3 interface.  Even when i try to bind the policy to X3, it will only authenticate on X1.
0
 
LVL 33

Expert Comment

by:digitap
ID: 35087807
ok...i understand. do you get an error when you set it to X3 or it will let you set it to X3, but the tunnel won't come up?

you are changing the VPN policy at the remote site such that the public IP that it uses is what's configured on the X3 interface, right?
0
 

Author Comment

by:jmhmis
ID: 35087997
I receive no error, only the tunnel does not come up.  When i use the T1 interface, the tunnel comes up.  The issue I am having is on my 4500.  I have only added the X3 interface ip to the primary and the tunnel fails.  Only when I add the X1 ip address on the remote tz100 to the "secondary" does the tunnel come up.  I do not want to switch the X1 and X3 interface on the 4500 unless it is a last resort.
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VPN tunnel up, but no pings or remote resource access 13 99
RDP Sonicwall 8 67
Botnet detection help me please 21 83
Google Play app store not being blocked from smartphones 4 32
I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…
Many functions in Excel can make decisions. The most simple of these is the IF function: it returns a value depending on whether a condition you describe is true or false. Once you get the hang of using the IF function, you will find it easier to us…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now