Solved

How to set up an IPSEC tunnel between a Windows 2008 R2 server and a Sonicwall NSA 240

Posted on 2011-03-19
2
2,180 Views
Last Modified: 2013-11-30
Three attempts have been made to do this.  Sonicwall in a FAQ said that is is possible and to contact a Windows consultant to set it up due the complexity.

The Sonicwall Global client requires an account to stay logged in to the server all the time.  This isn't acceptable.

Using a L2TP connection and RRAS Dial on Demand will not work.  Even though an L2TP connection created from the Network and Sharing Center WILL work but only one way .  The server is able to ping nodes on the LAN behind the Sonicwall but not vice versa.  A packet capture shows that the Sonicwall is dropping the packets.  What is interesting is that given long enough time the pings will actually start to work.  After opening a case with Sonicwall, they said that an L2TP tunnel is only good for one way communication.

If you use Windows Firewall "Secure Connection" policies, you can create a connection but with the same problem.  The server can ping the LAN behind the Sonicwall but not vise versa.  However the Sonicwall does not drop these packets.  The packets make it to the server and Microsoft's monitor shows the IKE packets being received.  The server doesn't respond to them.

If you use the IP Security Policy, so far the Sonicwall just reports "NO_PROPOSAL_CHOOSEN".  So I have yet to find the magic setting to make this establish a tunnel.

For Phase one:  I use:
Group2, 3DES, SHA1, Preshare Key

Phase 2:
3DES, SHA1

I have 4 different ways that ALMOST work.  It is hard to believe they are so close but don't.

This project is to enable us to connect to hosted Virtual Machines we rent from a vendor.
0
Comment
Question by:Seitech2323
  • 2
2 Comments
 

Accepted Solution

by:
Seitech2323 earned 0 total points
ID: 35455925
It turns out that Windows 2008 R2 has a bug.  A hot fix is going to be issued.

You will be able to use the Windows firewall to create IPSEC tunnel.  I have seen it actually connect to a Sonicwall firewall.
0
 

Author Closing Comment

by:Seitech2323
ID: 35455935
This is the only solution that I know of.
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Join & Write a Comment

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now