Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Our VPN is down at two sites

Options
  • 11-05-2007 12:01pm
    #1
    workaccount
    Closed Accounts Posts: 2,460 ✭✭✭


    We have two sites here. Both VPNs are down.

    The remote VPNS are coming from zxtel DSL routers into our sonicwall concentrator.

    The VPNs are not working and ive tried restarting the zxtel boxes but it didn't change anything. None of the settings have changed. I have also tried disabling and re-enabling the VPNS both remote and local. The concentrator is def working fine because we have numerous other sites and their vpns are working.

    Workstations can ping the local zxtel and the web interface can be accessed over the WAN ip.

    What could be wrong?


    Im just looking at the sonicwall now and it says the vpn is not active (no green light). Perhaps I need to activate this or should they just negotiate when the remote router tries to connect?


Comments

  • Options
    #2
    workaccount
    Closed Accounts Posts: 2,460 ✭✭✭workaccount


    Ok,

    Heres the error im getting on the sonicwall....
    Received unencrypted packet in crypto active state (from remote router to sonicwall)


    I am also getting
    IKE Responder: Remote party timeout - Retransmitting IKE request (from sonicwall to remote router) and then Received unencrypted packet in crypto active state (from remote router to sonicwall)


  • Options
    #3
    WizZard
    Registered Users Posts: 6,762 ✭✭✭WizZard


    If you're using a Shared Secret try changing it. I've got some Sonicwall boxes here that have unique quirks (but that usually works when a VPN is acting up)

    Is there any NAT traversal happening between the endpoints?


  • Options
    #4
    _CreeD_
    Registered Users Posts: 4,148 ✭✭✭_CreeD_


    Aye initial authentication is likely the issue. But to be sure verify all stages of the IPSEC policy SA and Proposals match on both ends. How do you authenticate, do you use remote access accounts for the sites or full site-site? Is it a common key used for all remote sites or are they unique?


Advertisement