Menu

Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Sign In Register

Site-to-Site VPN allows one way traffic - Which side do I start from with Packet Monitor

StingrayStingray Newbie ✭
in Entry Level Firewalls

We have this problem and try to diagnose it. I have no idea how to use Packet Monitor, so I need to learn it. Where do I start?

Site-to-Site VPN allows one way traffic. So do I set PM on the destination side?

Category: Entry Level Firewalls
Reply

Answers

  • FeitFeit Newbie ✭

    Hey,

    you can start on both sides with the monitoring.

    Here are some settings you should generally use for analyzing IP communications:

    General → Monitor Filter:

    Ether Type(s): IP

    IP Type(s): TCP,UDP,ICMP

    Source or Destination IP Address(es): The IP you want to reach on the other side of the VPN.

    As long as the checkbox "Enable Bidirectional Address and Port Matching" is enabled it doesn't matter whether you enter the IP as source or destination.

    Also helpfull: "Dropped packets only", if you want to see only blocked packets.

    If you see the status "consumed" in the "Captured Packets" on the outgoing SonicWall you know that the SonicWall put the IP in the VPN tunnel.

    Here are the other status states explained:

    https://www.sonicwall.com/support/knowledge-base/brief-description-on-different-types-of-the-packet-status/200506225034657

    Greetings,

    Sebastian

  • StingrayStingray Newbie ✭

    Hi, FEIT

    Thank you so much! I just did one.

    FROM X1 to X1

    One Sonicwall LAN IP to another Sonicwall LAN IP address

    I got nothing, so it seems that PING never reached another site. Am I doing it wrong? Should I do FROM X0 to X0?

  • ArkwrightArkwright Community Legend ✭✭✭✭✭

    Check the VPN status, are the TX/RX bytes incrementing on both sides?

Sign In or Register to comment.