Internet down in one office effecting other - help!

[slackerinabox]

Our fiber provider had an outage so we switched over to our backup line (forced reroute on our sonicwall). Weirdly, our office is now fine but our satellite office has no internet and no file server access, though I'm able to connect to their sonicwall. I'm more of a web manager and am rolling up my sleeves to figure it out, any suggestions?

 

[Genx87]

By connect to the remote sonicwall do you mean VPN?

 

[slackerinabox]

By connect to the remote sonicwall do you mean VPN?

They're sonicwall admin page. VPN's not working. It's as if we our servers don't exist to the satellite office. I'm guessing it's something to do with the ip change (from moving from our fiber provider to cable modem backup)

 

[Fardringle]

If your satellite office was connecting through the main fiber line at the main office, then this makes perfect sense. If the main fiber line is down, the satellite office doesn't have anything to connect to unless you reconfigure their system to connect through the backup cable line at the main office.

 

[Enigma102083]

You need to configure the Sonicwall site-to-site VPN to have an alternate that points to the WAN IP of the secondary connection. I'd be willing to talk you through it if you want.

 

[Enigma102083]

Go to the sonicwall interface on the remote-office end. On the left select VPN, then Settings. Select the tunnel and click on the pencil on the right to edit it. The following screen pops up, where it says "IPsec Primary Gateway Name or Address" should have the WAN IP address of the fiber link. You need to put the WAN IP address of the secondary link where it says "IPsec Secondary Gateway Name or Address." Once you do that, it should re-negotiate the tunnel to the secondary connection and will failover too it if it ever fails again.

 

[thecoolnessrune]

This is why I wish sometimes that AT had Rep or Kudos or something so new members got recognition to separate them from the one-time askers that swamp forums alot.

Hopefully your advice Enigma helps the OP. Thanks for your contribution either way, its great to see from our new members (Or rarely posting lurkers as it may be)

 

[Enigma102083]

This is why I wish sometimes that AT had Rep or Kudos or something so new members got recognition to separate them from the one-time askers that swamp forums alot.

Hopefully your advice Enigma helps the OP. Thanks for your contribution either way, its great to see from our new members (Or rarely posting lurkers as it may be)

Thanks! Sonicwall VPNs just happen to be my bread and butter, so I was able to grab screen shots real quick from one of mine, and I was able to quickly recognize what his problem was. :biggrin:

 

[slackerinabox]

Go to the sonicwall interface on the remote-office end. On the left select VPN, then Settings. Select the tunnel and click on the pencil on the right to edit it. The following screen pops up, where it says "IPsec Primary Gateway Name or Address" should have the WAN IP address of the fiber link. You need to put the WAN IP address of the secondary link where it says "IPsec Secondary Gateway Name or Address." Once you do that, it should re-negotiate the tunnel to the secondary connection and will failover too it if it ever fails again.

THANK YOU, THANK YOU, THANK YOU! I was able to figure this out after way too much trial and error, but this was exactly the problem. You're good, very good

 

[Enigma102083]

THANK YOU, THANK YOU, THANK YOU! I was able to figure this out after way too much trial and error, but this was exactly the problem. You're good, very good

What kinda sucks is I think I got it posted up maybe 10 or 15 minutes after you logged off to work on it. I tried sending you a PM hoping it would hit your email and you'd come check back in. I know from experience that you'd end up working for HOURS trying to figure it out and I was hoping to save you the effort :biggrin:

Then I could have at least made the classic joke about sending you an invoice :twisted: