Sonicwall VPN - 4 Sites

[nicedreams]

I have a network with 4 locations connected together through a site-to-site VPN. The main site has a Sonicwall TZ-170 and the other sites have Sonicwall TZ-100's. I have the site-to-site VPNs working fine, but all of the remote sites cannot see each other and cannot pass traffic to each other. Only the main site can see each remote site. All Sonicwall TZ-100's are connecting to the TZ-170 at the larger main site so the TZ-170 is the hub of all the connections.

How can I have the traffic from all 4 locations pass VPN traffic between each other and not just to the main site? Is it a simple configuration at the main site to have the main Sonicwall TZ-170 pass the traffic since it's the central hub of it all?

[BOOYAH]

Switch From Sonicwall.....

Im using foritnet and its as simple as adding all the vpn site into a "concentrator" no rules or anything to set. I have not used sonicwall is there somthing similar?

[nicedreams]

Switch From Sonicwall.....

Im using foritnet and its as simple as adding all the vpn site into a "concentrator" no rules or anything to set. I have not used sonicwall is there somthing similar?

It seems Sonicwall and Watchguard are you're only main line choices from Cisco. I suppose the pecking order from power being best is Cisco => Watchguard => Sonicwall.

Sonicwall is really easy to configure and maintain and so far I've never run into any issues. Played with Watchguard and not as easy to configure as Sonicwall, but all the people I know that use it like it better. Just trying to figure out how to configure things as I go along and this my next step.

[nicedreams]

After looking all through google it seems I need to add static routes to make this happen. I've found where to add the static routes, but I don't know what IP subnets and in which device to add these to.

Can someone help me with this part please?

[+BudMan MVC]

"but I don't know what IP subnets "

How do you not know the networks?? They are your networks right -- your the one that setup the site to site vpns.. Your stated you can access them from your central location -- how are you accessing them if you don't know what networks they are on?

So for example

you have 4 sites and your main site is the way I read it.

main site network 10.0.0.0/24

site1 10.0.1.0/24

site2 10.0.2.0/24

site3 10.0.3.0/24

site4 10.0.4.0/24

Well for a computer in site1 to get to site2 it needs to know how to get to site2 network, 10.0.2.0/24 -- how does it do that.. Well its path to get their is through the main site which it does know to get to.. So lets say your sonicwall is 10.0.0.254,

You need to add a route in site1 that says if you need to get to 10.0.2.0/24 talk to 10.0.0.254

Off the top I do not know exactly where you need to put that in your sonic config to push that route to the other sites vpn connection.. RTFM ;)

Here quick google pointed to this pdf

http://s3.amazonaws.com/DHWordPress/uploads/2010/01/SonicOS_5.5_Route_Based_VPN_Feature_Module.pdf

Document Scope

This solutions document provides details about Route Based Virtual Private Network (VPN) Technology,

its advantages, and procedures to configure a Static Route Based VPN.

[sc302 Veteran]

You need to add routes/rules in your sonic wall to all this to happen as budman stated. if you have sonicwall support, as painful as it is, you may want to give them a call. it is something relatively easy to do (if you have done it once you know what to do, if you have never designed a vpn network it is the most impossible task ever because you don't know where to start).

[xendrome]

Since it's all over VPN it's not so much the rules/routes, those get added automatically. At each site, he needs to add "Address Objects" for each of the other 3 networks, then group then into an "Address Group".

Then in the VPN properties for the tunnel, on the network tab, he needs to put the Address Group for the other 3 networks, into the "Remote Networks " (Choose destination network from list) option.

The sonicwall will then add the rules/routes automatically.

[+BudMan MVC]

not sure if you guys noticed but this thread is from feb 2011

[sc302 Veteran]

lol no i didnt

[xendrome]

<<Topic Closed>>

Spammer hit it and bumped the topic