Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The SonciWall has been put behind another device and despite everything being forwarded to the SonicWall I can no longer VPN in (UPDATE: "The peer is not responding to phase 1 ISAKMP requests" is logged in the global VPN client).

I think this is something to do with the IKE exchange using ISKAMP (although the 2 UDP ports Group policy sets in the firewall are also forwarded) being dropped by the new device.

Is there anything I can do? Is it possible to use a different method than IKE to establish VPN?


  • It is a SonicWall TZ170
  • Internet connection is up
  • I have the correct IP - I can connect using other applications
share|improve this question
What do you mean by you can not VPN in? Connection refused? Connection time out? Try to be as clear as possible. Please. – Gopoi Nov 4 '10 at 2:48
cannot establish a vpn connection - see update above – user55029 Nov 4 '10 at 3:16

You mention that you forwarded UDP ports - what about the different IP protocols? (AH and ESP - IP protocol numbers 50 and 51 Do you have those two forwarded to the SonicWall?

share|improve this answer
I would if I could - but it seems to only forward UDP and TCP :( – user55029 Nov 5 '10 at 7:27
What device is in front of the Sonicwall? – Dan Nov 5 '10 at 11:31
up vote 0 down vote accepted

Had to change the modem/router for one with that could be set to bridging pass though mode - PPPoE then has to be setup on the SonicWall.

Turns out some modem/routers just wont cut it.

SonicWall have a dedicated article to the issue:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.