Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am not sure this is the right place for this question but here goes.

We want to connect users using an L2TP VPN connection to a users at the other end of a SonicWall site-to-site VPN.

Currently we have a SonicWall firewall/router contraption in the home-office that is connected to a far-office over a VPN. Communications with machines in the home-office and far-office is fine. We also have an L2TP server running on the SonicWall that outside users can connect to. This gives them access to machines in the home-office. Communication between outside users and the home-office is fine. However outside users connected to the home-office via the L2TP server can't communicate with machines in the far-office.

Will there need to be network bridging or routing needed? Or will this simply be a firewall setting to get this working?

Thanks for any help or clues you provide! Rob

share|improve this question
Try a quick traceroute to ensure they can find each other, and that you can telnet to the right TCP/UDP port(s) on the target from the source, then check the firewall/L2TP logs. Ensure the port(s) needed are allowed on the target from the home office to the far-office. Check all firewalls, then their logs. – Lizz Jan 5 '13 at 6:38

You're most likely experiencing a routing issue. The image below is what I imagine your network roughly looks like.


If your home office network is

and your branch office network is

and if your L2TP VPN network is

Then on your branch office router, you will need to add a static route that points (user VPN) to (home office router). This lets the branch office know how to get to the user VPN network.

You will also need to assure your firewall rules on the SonicWall allow the different VPNs to talk to each other, whether it be a policy or a custom port rule for whatever types of traffic you want available to each other.

share|improve this answer
Thanks a lot for this. Also sorry it has been such a long delay on getting you feedback, we have been having a lot of different stuff happen lately :P – Pyro May 14 '13 at 9:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.