Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

The SonciWall has been put behind another device and despite everything being forwarded to the SonicWall I can no longer VPN in (UPDATE: "The peer is not responding to phase 1 ISAKMP requests" is logged in the global VPN client).

I think this is something to do with the IKE exchange using ISKAMP (although the 2 UDP ports Group policy sets in the firewall are also forwarded) being dropped by the new device.

Is there anything I can do? Is it possible to use a different method than IKE to establish VPN?

FYI:

  • It is a SonicWall TZ170
  • Internet connection is up
  • I have the correct IP - I can connect using other applications
share|improve this question
    
What do you mean by you can not VPN in? Connection refused? Connection time out? Try to be as clear as possible. Please. –  Gopoi Nov 4 '10 at 2:48
    
cannot establish a vpn connection - see update above –  user55029 Nov 4 '10 at 3:16

2 Answers 2

You mention that you forwarded UDP ports - what about the different IP protocols? (AH and ESP - IP protocol numbers 50 and 51 http://en.wikipedia.org/wiki/List_of_IP_protocol_numbers). Do you have those two forwarded to the SonicWall?

share|improve this answer
    
I would if I could - but it seems to only forward UDP and TCP :( –  user55029 Nov 5 '10 at 7:27
    
What device is in front of the Sonicwall? –  Dan Nov 5 '10 at 11:31
up vote 0 down vote accepted

Had to change the modem/router for one with that could be set to bridging pass though mode - PPPoE then has to be setup on the SonicWall.

Turns out some modem/routers just wont cut it.

SonicWall have a dedicated article to the issue: http://www.sonicwall.com/downloads/GVC_Peer_is_Not_Responding_to_Phase_1_Requests.pdf

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.