9608 VPN issue

[critchey]

I have a system running R11 I am trying to setup a VPN between a Sonicwall and a 9608 phone. I do not have control of the firewall but the IT guy has been sending screenshots so I can confirm anything if needed. Here is the problem I am running into:

Phone connects to VPN without errors and grabs an IP but sits at discovering of the IPO IP address. When I get into the CRAFT menu I can confirm the phone has grabbed an IP from the VPN DHCP... but the router is still set to my external router IP... not the router within the VPN that would route between the VPN network and the network were the IPO resides. Sonicwall tech support says they can see the phone grabbing an IP and is basically blaming the phone... I have tried 2 different phones at 2 different locations/networks. I tried 6.8.3 and 6.8.5 firmware all do the same thing. I feel like it has to be an issue with Sonicwall but because user's are connecting with the Sonicwall app and they traverse the VPN correctly Sonicwall is convinced it must be on the phone's end. As far as I know the phone MUST DHCP through the VPN so I don't see how it could be the phone but Im open to try just about anything at this point.

The truth is just an excuse for lack of imagination.

 

[kwing112000]

What do you have for IP routes on the IPO. if you connect a PC using the same VPN info can you ping the IPO? Are the phones getting a different subnet than the IPO?

Kevin Wing
ACSS Small and Medium Enterprise (SME) Communications
ACS- Implement IP Office
ACA- Implement IP Office
Vive Communications

 

[critchey]

Yes there is an IP Route. If we connect via PC with the Sonicwall app we can ping and connect to the IPO. Phone is getting a different subnet then the IPO. This is where I think the issue lies. IPO is on a different subnet then the phone so the phone needs to use the router to get to the IPO. The issue is the phone is using the local router instead of the VPN'ed router so obviously its not working.

The truth is just an excuse for lack of imagination.

 

[critchey]

Oh sorry you said what are the IP routes

IP 0.0.0.0
Subnet 0.0.0.0
Gateway VPN router IP
Destination LAN1

The truth is just an excuse for lack of imagination.

 

[TouchToneTommy]

We don't have the SonicWall provide DHCP to the VPN phone, just allow it to get IP and Gateway from the local network, then negotiate the tunnel and connect to the IPO. Default IP route in the IPO to the SonicWall is sufficient.

Sent you an email...

 

[critchey]

Sorry had some personal issues come up and haven't been able to check back on this.

TTT got the email I appreciate it.

At this point they are having a 3rd party look at it because I say its Sonicwall's problem and they say it is the phone... despite trying 2 phones from 2 different networks... and multiple firmwares... smh.

The truth is just an excuse for lack of imagination.