19
votes
Accepted
What does a UDP connection timeout really mean?
While there is no formal "connection" with UDP there is still a convention that clients send requests and expect to get responses back with the source IP and port swapped with the Destinatoin IP and ...
- 12.4k
11
votes
What does a UDP connection timeout really mean?
Your firewall is maintaining a connection table for UDP connections. For example, when you send a DNS query, the firewall creates an entry for that flow so that the DNS reply will be allowed back ...
- 65.2k
4
votes
How I can block Psiphon?
I'm quoting what is posted on the Psiphon page:
You can only establish connections via Psiphon by using the following ports:
53, 80, 443, 554, 1935, 7070, 8000, 8001,
6971-6999.
If you block ...
- 2,095
4
votes
Cannot get 2nd vlan to access internet or ping router gateway
I believe you mean to say that the router has an IP address 192.168.1.1/24, and this is the default gateway for clients in subnet 192.168.1.0/24? The router has another default route pointing to ...
- 880
4
votes
Accepted
Dual Network Switch Setup to Firewall - Best Practices
The answer will depend on where most of your internal LAN traffic will be going:
If most of your LAN traffic is INTERNALLY BOUND (ie, to a local File Server, Terminal Server, Intranet server, etc) ...
- 556
4
votes
How do I set up a Link Aggregation for 2 ports between a Sonicwall TZ500 and a Dell XP1018P
You can't do it on Sonicwall device. TZ series doesn't support link aggregation. Check this doc http://documents.software.dell.com/sonicos/6.2.3.1/release-notes/document-download?ParentProduct=847
- 1,152
4
votes
Accepted
I can't get a VLAN to talk to the LAN on a SonicWALL
Well, you normally don't make the port that the PC "on the VLAN" connects to a trunk, and that's probably the bulk of your problem. So the PC isn't actually ON the VLAN, regardless of what you set its ...
- 2,736
4
votes
Accepted
Multiple subnet exist on not seperated network segment?
It may be seen, today, as a poor design, but it's a perfectly valid configuration. The nodes in one subnet are mostly unaware of those in the other subnet. (yes, they can see each others broadcast ...
- 30.8k
4
votes
What does a UDP connection timeout really mean?
Your NTP server is behind your NAT (firewall). UDP is connectionless from the point of view of the application and OS and for most network appliances along the way.
For your NAT firewall, however, ...
- 41
4
votes
Sonicwall DHCP client option code
DHCP servers accept very few options from clients; though as you point out in comments a few options are sent by the client in the DHCP REQUEST, such as Vendor class identifier (option 60) and the ...
- 16k
3
votes
Impact on Firewall with IP camera network attached
I understand that most of the CCTV traffic will be confined to the LAN under X6 traffic because communication is between your cameras and the recording device.
Also, I understand that the only ...
- 1,152
3
votes
Accepted
SonicWall : Blocking Access Between Different Subnets or Interfaces
By default the LAN Zone has Interface Trust enabled, which means all interfaces within the same Zone trust each other (pass traffic). Go to Network, Zones, and Edit the Zone in question (LAN) and ...
- 556
3
votes
SonicWall : Blocking Access Between Different Subnets or Interfaces
By default, communication intra-zone is allowed. You just enter in Firewall->Access rules, select LAN->LAN and unmark the last rule wich allow intra-zone connections.
In my opinion, if you don't want ...
- 1,152
3
votes
Accepted
SonicWall : Bandwidth Management Per User
Set user for guaranteed speed of 1Mb and max speed of 2Mb.
This is absolutely possible. Dell has an article outlining this specifically; How To Configure Bandwidth Management with limits Per IP (...
- 5,469
3
votes
Sonicwall TZ-200 Can't communicate with other WIFI client on the same SSID
On SonicWALLS, in version 5.x (and 6 too, I imagine) this is known as "Interface Trust". To adjust this setting, go to Network -> Zones and check the box to "Allow Interface Trust" to resolve this ...
- 309
3
votes
Accepted
SonicWall NSA 2400 and 1:1 NAT with multiple public IPs
You certainly can do MANY:1 NAT -- that is: have several Public WAN IPs point to 1 internal LAN IP.
Just create Address Objects for each WAN IP and put those Address Objects into an Address Object ...
- 556
3
votes
Accepted
How do I send syslogs from a UTM/switch to a cloud-hosted log server?
You may be running into the fact that some firewalls only allow syslog to be sent from them via their management interface (and not directly out the port facing towards your SaaS/logging provider).
...
- 9,136
3
votes
SonicWall is dropping encrypted packets with error "sonicwall ipsec vpn decryption failed selector check error"
This sounds like an issue with traffic-selectors - if you are using policy-based VPN on both sides, you need to make sure the policy (eg: traffic you permit over the tunnel) is the same but reversed ...
- 9,136
3
votes
How to connect high-availability routers to high-availability firewalls
High availability is a big and sometimes tricky topic, depending on what you actually want to achieve. If you want to maintain running TCP connections, for example, with sub 100 ms retransmission, ...
- 16k
3
votes
Accepted
How can I create a static route between subnets on sonicwall
As boomi has already pointed out, this is no routing issue but a firewall issue. Most firewalls have an implicit deny all rule at the end of their policy list, so everything you haven't explicitly ...
- 78.1k
3
votes
Accepted
Access to a server behind the SonicWall from the LAN using Public IP addresses
It sounds like what you want is hairpin routing. This is not a good idea because it is suboptimal routing, involving NAT (a kludge that should be avoided whenever possible), and it unnecessarily ...
- 97.2k
3
votes
Accepted
Can I route a VLAN on a Sonicwall to use a different gateway?
The Gateway for the PBX should be the firewall (192.168.16.1). But you need to add a route (default) to the PBX to send SIP traffic to the SBC.
- 65.2k
3
votes
Can't get to the Internet from VLAN on switch
You can't use the same IP address 10.240.10.1 for both Switch 1 and firewall.
VLAN 20 is missing from Switch 1 altogether, so there's no connectivity from it to the firewall.
- 78.1k
3
votes
Accepted
What is the easiest way to regain access to the Sonicwall configuration management after I have locked myself out by deactivating https management
If you have a config saved off-device that you could cut & paste in via console, you are able to replace your Sonicwall config with the backed-up config via Safe Mode. AFAIK you can NOT edit an ...
- 5,354
2
votes
Accepted
Routing traffic between two subnets
You are correct, if you have a free interface (eg. X6) on each router connect ISP-LAN at each site to that interface. I don't know if the SonicWALLs support VRRP but it is not needed. DHCP will not ...
- 556
2
votes
Accepted
Three Servers on Three IP's
Unless I'm mistaken, the RV042G can do 1 to 1 NAT.
There's a guide on Cisco's website on how to enable it here.
In general, lets say your public IP block includes 100.0.0.177 through .180 as usable ...
- 252
2
votes
Equal WAN bandwidth for all LAN devices using Sonicwall NSA 2400/2600
I know this is an older post, but in case someone else stumbles upon it like I did, I wanted to provide some input.
So far, the only way to do this that I know of is with Mikrotik's PCQ (per-...
- 21
2
votes
Allow WAN to LAN traffic
You do not need transparent mode. Your firewall will forward traffic from the WAN1 to the LAN interfaces, assuming your policies allow it. To configure these policies, you will need to create ...
- 65.2k
2
votes
QoS for site to site VPN
You need to create a Bandwidth Management Rule (BWM) Rule and apply it to a LAN > VPN firewall rule or DMZ > VPN if you have it in the DMZ. You can customize it for each individual site connection ...
2
votes
Accepted
SonicWall : Configuring WAN X1
The best answer will be to ask your ISP to either exchange your modem-router combo device for a modem-only device OR see if they can switch it into Bridge mode (where it becomes only a modem and no ...
- 556
Only top scored, non community-wiki answers of a minimum length are eligible