Most Stable Settings for Site to Site VPN? 1

[beholder95]

I've got a Pro2040 in my HQ and a TZ170 in my Branch office, I haev 1 VOIP phone in this office that connects back to the PBX in the HQ via this VPN. The VPN goes through phases of bouncing a few times per day, which prompts me to go in and change the settings for the VPN, say from Main to IKEv2, or group 1 to 3, or something small.
This usually fixes the issue for a while, until the problem starts again in a few months and i'll change the settings again.

The offiecs are about 30 miles apart geographically and are with the same ISP provider (cox). Does anyone know the most stable setings for a site to site VPN?

Thank You,
Andy

 

[SonicWALLInstructor]

Hi Andy,

Well your problem sounds like the ISP might have something to do with it or if you are running enhanced it can be a simple misconfiguration. However for me to tell you what is really happening I will need you to log the VPN Phase 1 and 2 when they are building a tunnel, go to the log setting and make sure the VPN tunnel catagories are selected.

If you are running enhanced OS make sure all objects using the tunnel are in the VPN ZONE not the LAN (default).

Roger White CISSP, CISA, CISM, GSEC
Certified SonicWALL Instructor
Certified Security Architect and Auditor
SonicWALL Curiculum Developer and Senior Trainer
SonicWALL Academy
(718)450-8127

 

[technome]

Are both units on BBUs ? the Sonics have power supplies with small capacitors, making them suceptible to power anomomilies.

Also pathping the firewalls from both directions, check for packet losses

........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm