Site to site VPN using sonicwall tz-500

MarkMcBride_1975

Hi all ,

I am new to sonicwall admin

I have set up site to site from azure using route based VPN policy , and two address objects 1. source network and 2. destination network.

Traffic seems to be moving to and from but cant ping the onprem or i cant ping the azure network from onprem also ???

Is there anything else i need to set up on sonicwall i.e route policy or something

Thanks

Mark

Halon5

Probably best to run a Packet Capture to find out what is blocking it.

Ajishlal

Hi @MarkMcBride_1975 ,

Please follow the below articles and confirm your configurations are correct;

https://www.sonicwall.com/support/video-tutorials/how-to-configure-a-site-to-site-vpn-between-sonicwall-and-windows-azure-in-main-mode/5415576481001/

https://www.sonicwall.com/support/knowledge-base/how-can-i-configure-a-vpn-between-a-sonicwall-firewall-and-microsoft-azure/170505320011694/

Saravanan

Hi @MARKMCBRIDE_1975,

Thank you for visiting SonicWall Community.

Please ensure to check the firewall rules between the respective internal and VPN zones on both the direction. If the rules are in place, try performing a packet capture on the SonicWall for both incoming and outgoing traffics on the SonicWall.

https://www.sonicwall.com/support/knowledge-base/running-a-packet-capture-for-tcp-and-or-udp-traffic/170505277474380/

Hope this helps.

 

MarkMcBride_1975

Hi All,

I have set up site to site vpn

My azure vm can ping my vpn device but not my host machine on local LAN

I can also ping the vnet from on prem.

Tunnel is up and running and data is been moving to and from azure and on-prem

I must be missing some configuration on sonic wall device to allow traffic to ping LAN machines any ideas ? :-(

I have set up VPN policy and address objects for source and destination networks not sure what I am missing

Thanks

Mark

Saravanan

Hi @MARKMCBRIDE_1975,

The possible reason is to check the access rules between respective zones back and forth. Perform a packet capture on the SonicWall to locate the accurate reason for packet not passing fine.