Comments
-
Thank JOHN_LASERSOHN for your clarification. This is why I kept trying to figure out as I saw package connection dropped by the Firewall why trying to connect via the alternative public ip. It said that the packet was drop due to no policy defined I am trying to define one but it also failed! So, Let's hope for it! Ngoc
-
Thanks Preston, I will keep trying some logic and share the result progressively. All the best
-
Hi Justin, That was what I did (as your have explained before). The reason that I want to ask here is seeing some responses from SonicWall so that we can learn a bit more, but finally, only those who in community like you and other shared hands. In fact, before making this topic, what I have done was: Option 1: Make a…
-
Thank THK for being patient to get through my case. sorry I do not understand the mix of PPPoE and Public IPs. Are we talking about two different lines? There is a type of service that ISP provides a block of static public IP for customer via their FTTH connection (PPOE with dynamic IP). In our case they provided 8 IPs…
-
Hi THK, Please see the drawing herewith: In Linux, I can do port forwarding but with SonicWall, I thought NAT can do but it is not. Please advice
-
Hi Preston, X4 connected to a media converter and hooks up to the internet by ppoe cinnection. I actually do not want a modem so decided to use the built in X4 of the firewall. Anyway, i used dyndns for the dynamic ip X4 and things worked fine. Logiccally i think there should be a way to route wan to wan for the firewall…
-
Hi Preston, I used the x4 interface to dial ppoe directly without any modem in between! It was provided with a dynamic ip /32 (IP A) of a sub net that is different from the 8 ip block provided by the isp. I have VPN set up successfully with ip A. As Ip A changed often so I want the VPN to be bound to one IP in the block of…
-
Hi Preston, As I have discussed with ISP guy, they, finally, the problem is routing issue on their side. Our system set up was corrected implemented without the need for enabling Secondary subnet but with following: Add static arp for public ip addresses; Add rule to allow WAN>LAN connection to internal servers Implement…
-
Hi Preston, I changed the subnet mask to 255.255.255.255 as your guidance, secondary subnet is 113.160.164.1/255.255.255.248 but failed in pinging the interface! For security issues, the ip provided on this discussion is not the real but they are in similar scenario for disscussion!
-
Hi Preston, Even this have been discussed on the other topic (this one was created earlier and I didn't realized that it was saved and posted as I navigated away from editing screen) but provided solution was not solved accordingly. So allow me to continue the discussion here! I tried changing the Net mask to /29 already…
-
Another point to note is my static ARP for all IP have similar mac address
-
Here is the full details of the packet: Ethernet Header Ether Type: ARP(0x806), Src=[c0:ea:e4:b2:c2:d9], Dst=[ff:ff:ff:ff:ff:ff] ARP Packet: ARP TYPE: ARP Response Sender MAC Address: c0:ea:e4:b2:c2:d9 Sender IP Address: 10.86.2.252 Target MAC Address: ff:ff:ff:ff:ff:ff Target IP Address: 0.0.0.0 Value:[0] Generated (Sent…
-
Hi Mr. SARAVANAN, Following is the monitoring results on ARP packet generation on the Sonicwall Please advice me with thanks
-
Yes Mr. SARAVANAN, I will try to see things! Many thanks for your supports! Ngoc - Vietnam
-
Dear Mr. SARAVANAN, I told VNPT (ISP) that they have done things wrongly but they refused. Please see my description below: I created a virtual interface with ip 113.160.164.1 (enable ping) and do the tracert (the last bit blocked is hidden) I made 113.160.164.1 to change to 113.160.164.2 and ping worked well with tracert…