9620 with Sonic Wall TZ 200

[nurban]

It amazes me that we we can set up one site with VPN phones in about 30 minutes, then you run across sites that take hours of tweaking, head scratching, and pure frustration...

With that said, we've been trying to get a remote phone up and running for the past few days.

The VPN tunnel builds successfully; however, the phone stays in Discover XXX.XXX.XXX.XXX mode indefinitely. We know there has to be an issue with the access rules on the SonicWall, but no matter what we've tried appears to work.

Current settings:
IPO - 192.168.250.7
VM Pro/Manager - 192.168.250.8
IP Route - 0.0.0.0/255.255.255.0/192.168.250.1/LAN 1

The SonicWall is on the latest firmware, and we've built access rules to allow any traffic from the VPN to the LAN and vice versa.

Once the tunnel is established, the log shows:
VPN Policy: WAN GroupVPN; ESP:3DES;
HMAC_SHA1; Group 2; Lifetime=28800 s
ecs; inSPI:0xb0692ca3; outSPI:0x3f26
1c4a

Tunnel Up. policy 0(WAN GroupVPN), D
st 192.168.7.110 - 192.168.7.110, Sr
c 192.168.250.0 - 192.168.250.255, G
W XXX.167.194.YYY, inSpi 0xb0692ca3,
Reason: IPSec Commit SA. Existed ds
tNode (Our public IP blocked out intentionally)


192.168.7.110 is the local IP for the phone on our network.

Does anyone have any thoughts as to what might be missing?

 

[DavidCT]

On the Sonicwall, make sure H323 Transformations is disabled (unchecked).

 

[nurban]

Trems -
I believe all of my settings are listed above. For some reason, that is the only site we can't access from our office. If we go to another office in our building and plug into a different network, everything does work.

Are you getting past Phase 2?