up vote 0 down vote favorite
share [g+] share [fb]

The SonciWall has been put behind another device and despite everything being forwarded to the SonicWall I can no longer VPN in (UPDATE: "The peer is not responding to phase 1 ISAKMP requests" is logged in the global VPN client).

I think this is something to do with the IKE exchange using ISKAMP (although the 2 UDP ports Group policy sets in the firewall are also forwarded) being dropped by the new device.

Is there anything I can do? Is it possible to use a different method than IKE to establish VPN?

FYI:

  • It is a SonicWall TZ170
  • Internet connection is up
  • I have the correct IP - I can connect using other applications
link|improve this question
83% accept rate
What do you mean by you can not VPN in? Connection refused? Connection time out? Try to be as clear as possible. Please. – Gopoi Nov 4 '10 at 2:48
cannot establish a vpn connection - see update above – Mrk Mnl Nov 4 '10 at 3:16
feedback

2 Answers

up vote 0 down vote

You mention that you forwarded UDP ports - what about the different IP protocols? (AH and ESP - IP protocol numbers 50 and 51 http://en.wikipedia.org/wiki/List_of_IP_protocol_numbers). Do you have those two forwarded to the SonicWall?

link|improve this answer
I would if I could - but it seems to only forward UDP and TCP :( – Mrk Mnl Nov 5 '10 at 7:27
What device is in front of the Sonicwall? – Dan Nov 5 '10 at 11:31
feedback
up vote 0 down vote accepted

Had to change the modem/router for one with that could be set to bridging pass though mode - PPPoE then has to be setup on the SonicWall.

Turns out some modem/routers just wont cut it.

SonicWall have a dedicated article to the issue: http://www.sonicwall.com/downloads/GVC_Peer_is_Not_Responding_to_Phase_1_Requests.pdf

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.