RE: [SonicWALL]- Problem forwarding packets

[John Tolmachoff]

Title: Message

What about setting up a VPN between the Nortel and the Sonicwall hub?   John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA  92835 www.reliancesoft.com   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Lance Loudan @ Benedict Sent: Tuesday, December 17, 2002 11:31 AM To: '[EMAIL PROTECTED]' Subject: RE: [SonicWALL]- Problem forwarding packets   OK, I set that up and it worked great, I can go in one firewall and go to other firewalls with no problems.  Now I have to go to step two. All of our firewalls have a route table put in that redirects traffic out a different getaway based on IP.  This is so that we can connect to Japan for SAP.  The Japanese will not use Sonicwall instead wanting to use Nortel.  Because of this we have two gateways.  How can I route traffic in through the firewall and then back out thru a different gateway.  I tried setting up a new policy on the client hoping it would route into the firewall and then see the routing table and go out, but that did not work or I do not have it set up correctly.  Any ideas?   Lance L -----Original Message----- From: Lance Loudan @ Benedict [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 17, 2002 11:12 AM To: '[EMAIL PROTECTED]' Subject: RE: [SonicWALL]- Problem forwarding packets Thanks to both of you, I will try setting this up later.    Lance L -----Original Message----- From: Jesper Bach [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 17, 2002 9:33 AM To: [EMAIL PROTECTED] Subject: RE: [SonicWALL]- Problem forwarding packets John,   You were not that far off in your reply to Lance.   The setup with the VPN client is basically unit-to-unit VPN. No more - no less :-)   /jesper   -----Original Message----- From: John Tolmachoff [mailto:[EMAIL PROTECTED]] Sent: 17. december 2002 16:12 To: [EMAIL PROTECTED] Subject: RE: [SonicWALL]- Problem forwarding packets My bad. See Jesper's post.   I did not see that you are using the VPN client.   I need to where my glasses more.   What I posted applies to unit to unit VPN.   John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA  92835 www.reliancesoft.com   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Lance Loudan @ Benedict Sent: Tuesday, December 17, 2002 6:33 AM To: '[EMAIL PROTECTED]' Subject: RE: [SonicWALL]- Problem forwarding packets   OK, I have done that, my question is what is Spoke 1 is the VPN client setup in Advanced mode.  Do I need to setup another connection with the different subnet on it.  I am asking this because I tried this and it still is not working.  Do I also have to add the VPN internal IP address to Spoke 2.   Lance L -----Original Message----- From: John Tolmachoff [mailto:[EMAIL PROTECTED]] Sent: Monday, December 16, 2002 4:13 PM To: [EMAIL PROTECTED] Subject: RE: [SonicWALL]- Problem forwarding packets On each "spoke" of the wheel, you have to define the other remote networks (other spokes) under the networks listed in the SA properties page.   Example:   Hub network is 10.0.0.0/24 Spoke1 is 10.0.1.0/24 Spoke2 is 10.0.2.0/24 Spoke3 is 10.0.3.0/24   You want Spoke 1 to have access to Spoke2.   On the SA properties of Spoke 1, you have a destination network specified of 10.0.0.0/24 You need to add a specified destination network of 10.0.2.0/24.   Now, the Sonicwall will know that anything destined for 10.0.2.0/24 is to be sent through the VPN to the hub Sonicwall, which will then forward it via the appropriate SA to that network.   John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA  92835 www.reliancesoft.com   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Lance Loudan @ Benedict Sent: Monday, December 16, 2002 11:54 AM To: SonicWall User Forum (E-mail) Subject: [SonicWALL]- Problem forwarding packets   I have set up my VPN client as set forth in the advance instructions supplied from Sonicwall.  I have that working fine and can connect to the firewall, my problem is that it is not forwarding to remote VPNs.  Do I need to setup a client for each new subnet and route it through the same firewall.  I guess my question is what tells the firewall to route the packets.  I have checked the route table and the remote VPN are not listed in it but I have SAs setup for all of them.  Do I still need to add them to the routing table?  The routes that I did add to the routing table are still not working either.  I could use some help please.   Lance L