1

I’m trying to set up group VPN on a tz190 with no success. This is my first time working with sonicwall, and cannot seem to make a connection with either Cisco VPN or Microsoft vpn. Can anyone walk me through this from scratch? If Cisco or Microsoft VPN client won’t work, can you recommend a open source or free client that will?

@Cisco

2 Spice ups
2

Chad, assuming you are referring to a Site-To-Site VPN.

You will have to create and configure a VPN policy on each end.

I have only ever created S2S VPNs between SonicWALLs but the basic ideas and principals are the same regardless.

What hardware are you referring to by Cisco VPN or Microsoft VPN??

3

no, not site to site. I referring to vpn client software such as cisco vpn client or microsoft vpn client. So that end users can remote into our LAN

4

I’ve never tried the Cisco or Microsoft vpn client for a remote user vpn connection to a Sonicwall. Is there some reason you don’t want to use the Sonicwall global vpn client? If you have the VPN licenses, you should be able to log into your mysonicwall.com account and download the VPN client software.

5

I don’t think either of those would work as they are vendor specific.

SonicWALL has its own VPN client program as well as a SSL-VPN capability. I would suggest using either of those.

Both are available on the MySonciwall.com site.

6

I just started at this hospital and apparently there are only 2 client licenses. I have 3 people needing to access the LAN on a regular basis. I don’t plan on having the sonicwall much longer and just need a temp solution

7

Tell them to share??

8

Ya, if you’ve only got two licenses, you’ve only got 2 licenses… That is “concurrent” connections though, so as long as only two are on, you’re good. I want to say that you CAN set up PPTP access though, and use the windows client. I don’t think that uses licenses either. If neither work, you’re gonna have to run a VPN solution on a different device for the time being, like a Windows server.

9

The SonicWALL GVPN client is a good and very secure client… The SSL-VPN side is even better… But if you need to go low cost… the SonicWALL can do L2TP (We use it for the stupid iPads), or open a port and put a VPN server such as Windows Server behind it.

10

You could setup 2 yo use the Global VPN and 1 to use the SSL-VPN, you usually get 2 Global VPN licenses and 1 SSL-Lic when you purchase the SonicWALL.

11

Hi gang,

Similar situation here just trying to explore this device and its VPN.

Trying to understand how Sonicwall handles VP and from what I see I have:

  • Global VPN Client 2 licenses = pretty straight fwd

  • VPN SA 15 licenses = 15 site to site connections?

  • L2TP Server = can I turn my wan port into a virtual host for unlimited VPN connections and if so any disadvantage over Sonicwall VPN client?

  • Is there any AD account integration through this device?

Thanks so much for your time.

12

PrioritySupport wrote:

Hi gang,

Similar situation here just trying to explore this device and its VPN.

Trying to understand how Sonicwall handles VP and from what I see I have:

  • Global VPN Client 2 licenses = pretty straight fwd

  • VPN SA 15 licenses = 15 site to site connections?

  • L2TP Server = can I turn my wan port into a virtual host for unlimited VPN connections and if so any disadvantage over Sonicwall VPN client?

  • Is there any AD account integration through this device?

Thanks so much for your time.

Priority, you are correct that 15 SA Licenses = 15 Site-to-Site VPN connections.

There is also AD Account Integration for SSO, user tracking and ACL’s.

Users>Settings

13

Oh very nice, I never really looked at VPN side of things on this box, I can see the LDAP etc.

  • I was able to get L2TP server going but with local user authentication, can L2TP server read authentication from LDAP?

  • Also, any chance of L2TP server and split tunneling? (I would want web traffic to be routed through users local gateway not the sonicwall box)

Thanks so much.

14

I am trying to set up a TZ190 to provide both PPTP and L2TP into a Mac Sever LAN. I have successfully connected the SonicWall to the LDAP and have authenticated my test account. But I can’t connect remotely and instead get an error 61 Connection Refused. I try to telnet into port 1723, but that is refused. I thought getting all the blanks filled in for the VPN that would automagically configure the rest of the VPN. I want the users to be able to VPN into the network, rather than just the server.

Suggestions? Questions? Invective?

Thanks,

-RonB