SSL VPN error: Packets consumed but couldn't login (server not reachable)
Dear all,
I am setting up SSL VPN on TZ500. I followed the steps from (they are basically all the same):
https://www.sonicwall.com/support/knowledge-base/how-can-i-setup-ssl-vpn/170505609285133/
When testing, I found that I can capture the packets on port 4433 with a status "CONSUMED". However, on NetExtender it keeps saying "Connecting..., Preparing...", and eventually shows "The server is not reachable" error. It doesn't even have a chance to check my credentials.
Can anyone help explain what's happening? The NetExtender's verion is 10.2.324. The screenshots of Packet Monitor, NetExtender, and the result of my test connection are shown below. Thank you very much.
Category: SSL VPN
Tagged:
0
Answers
Hello @khuang
could you try directly access to https://sslvpnipaddress:4433 on the browser? If you can I think it can be client side problem.
No I couldn't connect, nor can I https://sslvpnipaddress:443 to it. Weird. I created a different question for it. I believe they are related. Could you help take a look and advise? Thank you.
https://community.sonicwall.com/technology-and-support/discussion/4369/https-server-responded-but-client-never-received-what-could-be-the-causes
first of all, you don't need another topic for this problem. You should enable 2 things on the firewall.
1) X1 interface settings user login check box must enable.
2) into the ssl vpn settings enable X1 or whatever sslvpnip interface sslvpn service red button convert to yellow.
could you share sslvpn settings and Wan interface settings? my advice: you should delete ip addresses on interface screen shots.
Thank you. I created another topic because I think the issue is not because of my SSLVPN settings since I also couldn't access port 443 of the firewall. My other post shows that even the TCP handshaking is incomplete (my computer couldn't receive SYN,ACK packet) ....
Please find my WAN interface setting and SSLVPN settings below. I checked many times and there shouldn't be errors in the SSLVPN configuration...I might be wrong though.
Thanks so much. Any advise would be greatly appreciated!