Posted on 2012-03-28
Hello all this is going to take a big of time to explain but I want to put as many if not all the facts here.
I have a Sonicwall TZ210 with the latest firmware
I have it configured for the Internet and 2 LAN subnets
I have a Site to site VPN that works fine, it connects to a remote subnet of 192.168.10.X
I have a GVC VPN setup and connects with no problem, I am using LDAP from the server so that user can connect to the VPN with their Domain user name and account.
I have the DHCP setup to my Domain controller and I get all the info from it. IP Address, subnet, DNS Server, 2 of which are my internal ones. So the IP address I get when I connect to the VPN is 10.10.10.X subnet, the same as the internal subnet.
The 2 subnets that I have on 2 different subnets are 192.168.168.X and 10.10.10.X on 2 different interface.
Ok this is what I can do:
I can connect to the sonicwall with the GVC
I can Ping the 192.168.168.1 (Sonicwall address X2)
I can Ping the 10.10.10.1 (sonicwall address X0)
I can ping anything on the old subnet 192.168.168.X
I can ping anything on the other side of the site to site vpn 192.168.10.X no problem
I can resolve DNS on everything in the network
I can ping all my other server (10 total) but this is where it gets tricky some I ping and I get 1 response only then it times out, I will ping again and again only one response. Other servers I can ping –t and they will always respond to me. NOW that being said it changes every time I log on with the VPN client sometime 10.10.10.20 will ping fine and then the next time I connect I can only get 1 ping and it times out. I will then disconnect and reconnect the VPN client and will not be able to get more than one ping from the servers I was previous able to ping with no problem and then other server that I could only ping once the connection before I can ping with no issues.
Also as long as I am not on the 10.10.10.X subnet I can ALWAYS ping the IP address and resolve DNS to the 192.168.168.X and the 192.168.10.X subnet (this subnet is over the site to site vpn).
I have looked at my logs and they give me nothing, I have search the Internet and gotten nothing, so anything you guy can do to help would be great.