How to connect SSL-VPN to a WAN sub-interface

Description

This article applies if you are facing an issue where you unable to connect to SSL-VPN and reach the Virtual Office Website from Internet when the WAN Interface is a VLAN Subinterface and there is no IP configured on the Parent interface.

Resolution

Steps to reproduce:
1. Create a VLAN Sub-interface under one of the physical interfaces
2. Leave the Parent interface unassigned
3. Configure the VLAN Subinterface with an IP in WAN Zone
4. Set up SSL-VPN
5. Try to connect to Virtual Office via Web ('click *here* for sslvpn') form External network OR just connect via NetExtender OR Mobile Connect- The request results in timeout.

6. Try to connect to Virtual Office via Web ('click *here* for sslvpn') form Internal network OR just connect - virtual office website loads without any problems. 

Workaround: 
1. Assign a "dummy"/"fake" IP address to the Parent Interface (ie. 1.1.1.1) and place it in the WAN Zone
2. Try to connect to Virtual Office via Web ('click *here* for sslvpn') form External network OR just connect via NetExtender OR Mobile Connect.

3. Virtual office website loads without any problems.

Related Articles

  • SonicOS 8.1.0 FAQ
    Read More
  • SonicWall GEN8 TZs and GEN8 NSas Settings Migration
    Read More
  • Getting started with SonicWall firewalls
    Read More
not finding your answers?