Monday, July 22, 2019 ..:: diestarinlu1986 ::.. Register  Login
Michael Regan

Thanks for the guide! It’s a great help! I have one Q though, I can connect from my network to other network (ipsec network) via ssh to any servers. But when I’m in the other network, and trying to connect back to our network, I can’t access the servers.

PfSense must be set up and be working correctly for the existing local network environment. Both locations must be using non-overlapping LAN IP subnets. For demo purpose my PFSense appliance located at

SonicOS 6.5 was released September 2017. This release includes significantuser interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 and later firmware.

By default firewall rules are automatically added to the WAN to allow the tunnel to connect, but if the option to disable automatic VPN rules is checked, then manual rules may be required. The following rules added by the firewall (you can see them by typing the command at PFSense console)

Actually it’s “pfSense” rather than “PFSense”. I know, a small typo but it’s also part of the trademark. Check out the logo on . My fifty cents.

And, there you have it, VPN up and running from your SOHO. For more info see the official doc .

To create a new Phase 2, click the large + inside the Phase 1 entry in the list, on the left-hand side. This expands the list to display all Phase 2 entries for this Phase 1. Click the + button on the right to add a new entry:

Sonicwall site to site vpn pppoe

Thank you for your response and I apologize for the delay. I spent 2-3 days figuring this out but still it was a no-go. At this point I am thinking to change my ISP and get few static IP's but I want to give it a final shot.

4. Local IKE ID SonicWall Identifier: (This could be any string except it has to match the remote location VPN's Peer IKE ID SonicWall Identifier)

I am having trouble getting Aggressive mode vpn to work between Sonicwall TZ 600 and Cisco ASA 5505. I have tried to search support forums and work accordingly but it simply never gets up. The problem is Sonicall requires an IKE string to connect in Aggressive mode, I am using firewall identifier in this case. There is no documentation in Cisco as to where I configure that string. That being said, the strings should match between Sonicwall and Cisco to establish the connection. Please note that the Sonicwall has a static WAN IP as to Cisco ASA has a Dynamic IP (runs on PPPOE). Please check the configuration below on both ends:

In this example, Local ID is mentioned as FQDN (email address). However, we can use any of the available qualifiers, making sure it is the same on the peer end as well. It could be anything as long as it is same on the other end. This is an important configuration since it is the only way for the peer to identify the dynamic gateway.

I have a small favor to ask. More people are reading the nixCraft. Many of you block advertising which is your right, and advertising revenues are not sufficient to cover my operating costs. So you can see why I need to ask for your help. The nixCraft takes a lot of my time and hard work to produce. If everyone who reads nixCraft, who likes it, helps fund it, my future would be more secure. You can donate as little as $1 to support nixCraft:

*Turkey Shoot*

Friday & Saturday
7:00 PM in the Canteen


Friday & Saturday
8:30 PM in the Canteen

Site hosted by 
Copyright 2006-2017 - R.A. Mitchell American Legion Post 51   Terms Of Use  Privacy Statement
DotNetNuke® is copyright 2002-2019 by Perpetual Motion Interactive Systems Inc.