Welcome to ISAserver.org

Site-to-Site IPsec VPN Tunnel (Sonicwall 3060 to ISA 2006)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Site-to-Site IPsec VPN Tunnel (Sonicwall 3060 to ISA 2006)

Page: [1]

Message

<< Older Topic Newer Topic >>

Site-to-Site IPsec VPN Tunnel (Sonicwall 3060 to ISA 2006) - 12.Jan.2007 2:28:22 PM

bretb

Posts: 1
Joined: 12.Jan.2007
Status: offline

Thought this would be a simple setup, but quickly turning into a major headache.

I'm trying to configure an IPSec VPN tunnel between a ISA 2006 Ent. firewall and Sonicwall Pro 3060 running enhanced OS. The tunnel will not construct and I'm getting the following two errors in the Sonicwall log (listed below).

Sonicwall offers the following "tech note" guide even though they do not support VPN tunnels to thirds party firewalls. (http://www.sonicwall.com/us/support/323_3615.html) - though this guide is technically for ISA 2004 standard, I'm connecting a 2006 ISA Enterprise server to Sonicwall 3060 running Enhanced OS.

All settings appear to be correct, but I'm still getting two indicators in the log:

1. Received notify: NO_PROPOSAL_CHOSEN
2. Received IKE SA delete request

These would seem to propose that the Sonicwall SA is not 'found' or not configured correctly, but everything was done according to the guide available at the above listed link.

Has anyone else run into this, or have any suggestions that might even simply 'point me in the right direction'?

Any help would certainly be greatly apprecated.

Post #: 1

Featured Links*

RE: Site-to-Site IPsec VPN Tunnel (Sonicwall 3060 to IS... - 22.Jan.2007 10:23:34 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Bret,

Check out Stefaan Pouseele's blog -- he keeps close track of IPSec tunnel mode issues with downlevel VPN gateways.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bretb)

Post #: 2