VPN with SonicWall Pro

[mjstanton]

Hello - has anyone set up a VPN using SonicWall Pro? If so, would you be so kind as to give me a brief "how-to"?

Thanks in advance for any/all replies!

M :->

 

[Dmasch]

You have two networks
Network1 192.168.0.1
Network2 192.168.1.1

Go to router VPN setup on network1
Name network1
IPsec keying mode =manual key
check mark enable windows networking (netbios) broadcast
put in your destination submask ex: 255.255.255.0
destination address range begin 192.168.1.1 **if you check mark allow remote clients don't worry bout these***
destination address range begin 192.168.1.254 ****
IP sec gateway address (public ip address of Network2's router)
incoming spi 300
Outgoing spi200
encryption method =des or what ever one you want make the same on both networks.
encryption key = you provide this *make it the same on both routers
authen key = same as above
also you will have a shared secret make the same on both routers

You will need to setup network2 using the same type of settings except differnet IP sec gateway address.

Hope this helps. Sonicwalls come well documented. Do you have the book? It explains in greater detail than what I did but this should give you an idea of what settings to put where.

 

[mjstanton]

Thanks for the info - I am still a bit confused. We have an NT4.0 network, a SonicWall Pro firewall. I want to be able to connect to the network from my home PC via VPN. I have cable modem, and no static IP address. Isn't there client software needed for SonicWall? Still searching for our documentation!

MJ

 

[Dmasch]

Yes,
I believe that there is one included with the Sonicwall Pro. I believe that you need to get the VPN upgrade for the sonic wall if you have not done so already. Go to mysonicwall.com and register your product, from there they will be able to give you everything you need. You need to install that on your client and configure the sonic wall to accept that connection. Their support is very good also.

 

[itsisnofun]

mjstanton

dmasch is correct in this. you have to go to sonic wall and register it. after that you can download the client software if you purchased it with the firewall. We run a soho2/50 and i have one user runnning roadrunner dsl from home with the vpn client with no problems. you also have to go thought most of the steps as setting up encryption method and shared secret. you also have to export the config from the firewall and load to the client so do that first. it also does not export the shared secret so you need to make note of that.

 

[mjstanton]

Thanks, Dmasch and itsisnofun! I found our documentation, and I set up the SA here first. Then I downloaded the VPN client at home (we get one free client license) and installed it. I was following the step-by-step instructions just fine. I got through the configuration of the VPN Security and Remote Identity steps. Then I moved on to configuring the VPN Client Security Policy. There are 3 steps to it - I was able to complete steps 1 and 2. But step 3 told me to "select USE MANUAL KEYS" in the "Select Phase 1 Negotiation Mode" box. This option was greyed out and I could not select it!!! So I am stumped. SonicWall wants $75.00 per incident for phone support. Their support on the web was "unavailble" when I tried a while ago. I'll try again, but in the meantime, if either of you know how to help me, I'd really appreciate it. My boss would really rather not spend $75.00 on this incident. BTW, I use Windows XP at home. I don't know if this makes a difference - SonicWall's website says the VPN client will work with XP!!

Thanks!!
MJ