VPN traffic stops passing through NSv firewalls due to the removal of VPN licenses.

Description

This article explains the how you can identify the issue and the suggested workaround for the issue

Identifying the issue by Downloading the Tech Support Report (TSR) from the NSv:

    • Click Device in the top navigation menu.
    • Navigate to Diagnostics | Tech Support Report.
    • Enable all the toggle switches under Configure and then click Download Tech Support Report.

      Image

    • Open the TSR in any Text editor like notepad, word etc.
    • Search for the following:

      #VPN : Settings_START
      #Blade_1_SETTINGS_START
      vpnFeaturesOn : 0
      IPsec enabled : on

    • If you see a vpnFeaturesOn : 0 this indicates that the VPN licensing is not active on the NSv.

Suggested Workaround:

  1. Synchronize license on the firewall

    Navigate to Device|Settings|Licenses and click Synchronize button. 

    Image

  2. If the above method didn't fix the issue with VPN, please try resetting license by following below:
  • Downloading the firewall configuration
  • Click Device in the top navigation menu.
  • Navigate to Settings | Firmware and Settings and click on Import/Export configuration button. Select Export Configuration from the drop down.

    Image

  • Resetting the Licenses on Diag page and Re-registering the firewall. 
  1. Go to the Diag page. The Diag page can be reached by typing in the LAN IP of the SonicWall in the browser, with a  IP/sonicui/7/m/Mgmt/settings/diag at the end.

 EXAMPLE: 192.168.168.168/sonicui/7/m/Mgmt/settings/diag.

Image

  1. Click "Internal Settings"
  2. Before moving to the next step please confirm you have the username and password for mysonicwall.com to register the device once again.
  3. Click the"Reset Licenses and Security Services Info" button and then click "Exit Internal Settings" at the top of the page.

    Image

 

NOTE:  Virtual Firewalls will require a reboot and will require the Serial Number, Authentication Code and Registration Code to be entered which can be gathered from mysonicwall.com You may also be prompted to choose between Classic and Policy for Policy Mode Switching

 

You can reach out to the support team with the Issue ID MSW-42763 for any further assistance on the issue

Related Articles

  • How to configure Link Aggregation
    Read More
  • Web Proxy Forwarding is not Supported to a Server on the LAN
    Read More
  • アプリケーション制御を使用して ICMP(Ping)をブロックする方法
    Read More
not finding your answers?