NSA 4650 not accessible through DELL S5232F

AINDER · June 2020

Hi everyone,

I have two Sonicwall NSa 4650 in cluster (Active/Passive) which I have connected to my Dell S5232F switches.

The two switches are connected via VLTi.

The problem is that I can't reach the Sonicwall via the Dell switches. When I run arp -a from VLAN 10 the sonicwall gateway is not visible.

I basically use the fiber port on the sonicwall (X25) and give it an IP. On this port I created our VLANs which I’m trying to access.

Any hint why the Sonicwall gateway is not reachable through the dell switches?

Best regards

Ainder

Dell Switch Config on both Switches:

interface ethernet1/1/13:2

description "FirewallLANPort"

no shutdown

switchport mode trunk

switchport access vlan 1

switchport trunk allowed vlan 2,10

flowcontrol receive off

flowcontrol transmit off

Sonicwall Config: See the picture

Bildschirmfoto 2020-06-07 um 17.29.28.png

AINDER · June 2020

Many thanks for the assistance. @Poorni_5 @Prabath @Saravanan @shiprasahu93

The problem was actually on the switch. I had to disable STP on the ports connected to the sonicwall.

shiprasahu93 · June 2020

Hello @AINDER,

We would need to perform a packet capture for ARP on the firewall to see what might be going on.

The only reason that I can think of is, if the traffic from VLAN 10 is not coming with the tag of VLAN ID 10 to the firewall. In that case, the firewall will drop the requests made.

Could you please check the VLAN tagging on the switch?

Thanks!

Saravanan · June 2020

Hi @AINDER,

Hope you are safe and fine.

Could you please follow the below suggestions? These would help you to isolate the issue.

Could you ping the VLAN interface IP of SonicWall from the switches and see if switches can ping?
Similarly, please verify pinging the switch IPs from the SonicWall appliance's GUI as shown below.

You can perform a traceroute to the firewall's interface IP from one of the computers on the VLAN behind switch using traceroute command "C:\Users>tracert 10.0.10.254".
Lastly, we can perform packet capture at both switch and firewall levels to pin point the root cause. On the switch you can capture packets on a specific interface(s) using tcpdump feature. In SonicWall to perform packet capture, please use below web-link for just reference.

https://www.sonicwall.com/support/knowledge-base/how-can-i-setup-and-utilize-the-packet-monitor-feature-for-troubleshooting/170513143911627/

Let us know how it goes and we can help you to overcome the issue 🙂

Have a better day!!!

Prabath · June 2020

@ AINDER,

Please verify native VLAN config,

Thank you.

Poorni_5 · June 2020

@AINDER ,

I hope the suggestions provided by our team has helped you fixing the issue. If not please open a case with our technical support team and one of our engineers will assist you on the same.

https://www.sonicwall.com/support/knowledge-base/how-to-submit-a-support-case-online-at-mysonicwall-com/170814110235888/#:~:text=Login%20to%20your%20mysonicwall.com,lightbulb%20with%20a%20question%20mark.&text=Once%20under%20the%20Support%20and,serial%20number%20and%20select%20next.

Thanks & Regards,

Poornima.T.R

Poorni_5 · June 2020

Hi @AINDER ,

You are Most Welcome. Good to hear that the issue is resolved.

Thanks & Regards,

Poornima.T.R

Join the Conversation

NSA 4650 not accessible through DELL S5232F

Best Answer

Answers