site-to-site VPN between a PIX515 and a SonicWall firewall

[wdbrewster]

Hi,

I am trying to establish a site-to-site VPN connection between a Pix515 and SonicWall firewall. I am able to get a tunnel up using an 1841 integrated router with an ADSL interface with the same configuration as the PIX. The PIX has other tunnels to different locations with Cisco boxes up and running fine. The Pix connects to the internet via a 1721 router and 512kbps frame relay. Remote sites are connecting to the internet with DSL.

See attached debug for the problem I am getting.

[gfullage]

You're passing Phase 1 negotiation, then the PIX sends a config mode request to the SonicWall (SW) but doesn't receive any response. It tries a few more times then gives up and clears down what it has built.

I see you're actually doing Xauth and config-mode (trying to assign an IP address) to the SW, but you normally wouldn't do this for a L2L tunnel, and that may be why the SW is not responding. The logs off the SW would be handy.

Try turning off XAuth and mode config to the SW with the following:

isakmp key address netmask 255.255.255.255 no-xauth no-config-mode

You would normally do this for all L2L peers, it may be that the Cisco devices are just rejecting the requests and continuing on, whereas the SW is actually dropping the negotiation.

[wdbrewster]

Thanks for your help. That was the problem.