Do you have any upstream switches (ISP) from your Firewall?
If you don't have any upstream switches in both side of the firewall, Please check what @shiprasahu93 suggested.
If you are not adjusted the default IPSEC life time (28800) check the DPD. ‘Dead Peer Detection’, which is a method to determine if the remote peer of a VPN policy is still active. Sometimes these packets get lost, and sometimes the timers are set too short, but the result is the SonicWALL tears down a VPN tunnel that actually had no problems. You can try to fix this by doing two things – you can either shut off DPD on both sides, or you can adjust the DPD timers so that they are less aggressive. For example, to shut off DPD completely, go to the ‘VPN > Advanced’ page and uncheck the box next to ‘Enable IKE Dead Peer Detection’. Make sure to do this on at least one side of the tunnel.
Answers
@Alberto,
I would suggest looking at the IPSec lifetimes as well as the DPD settings for this one.
Thanks!
Shipra Sahu
Technical Support Advisor, Premier Services
Hi @Alberto ,
Was your issue resolved?
If so please mark the reply as then answer to help other community members find the helpful reply quickly.
@Alberto,
Yes, you can. You just need to make sure that this matches exactly to the local network on its peer.
Thanks!
Shipra Sahu
Technical Support Advisor, Premier Services
Hi @Alberto
Do you have any upstream switches (ISP) from your Firewall?
If you don't have any upstream switches in both side of the firewall, Please check what @shiprasahu93 suggested.
If you are not adjusted the default IPSEC life time (28800) check the DPD. ‘Dead Peer Detection’, which is a method to determine if the remote peer of a VPN policy is still active. Sometimes these packets get lost, and sometimes the timers are set too short, but the result is the SonicWALL tears down a VPN tunnel that actually had no problems. You can try to fix this by doing two things – you can either shut off DPD on both sides, or you can adjust the DPD timers so that they are less aggressive. For example, to shut off DPD completely, go to the ‘VPN > Advanced’ page and uncheck the box next to ‘Enable IKE Dead Peer Detection’. Make sure to do this on at least one side of the tunnel.
I have disable DPD at 10:03 but log persist every 10 minutes. do I disable and reenable vpn to take change ?
before disable DPD:
Hi @Alberto
Do you have any upstream switches (ISP) from your Firewall?
yes sonicwall WAN goes to a switch and then to a router.
For testing, change the switch and try. Most probably the above issue due to upstream devices.
Hi @Alberto
May I know did you try above suggestion?
sorry from the tests done the vpn works well but the logs are always like this