Products
- Network Security
  - Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
  - Security ServicesComprehensive security for your network security solution
  - Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
  - Capture ATPMulti-engine advanced threat detection
  - Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
  - Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
  - Secure Mobile AccessRemote, best-in-class, secure access
  - Wireless Access PointsEasy to manage, fast and secure Wi-FI
  - SwitchesHigh-speed network switching for business connectivity
- Email Security
  - Email SecurityProtect against today’s advanced email threats
- Cloud Security
  - Cloud App SecurityVisibility and security for Cloud Apps
  - Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
  - Capture ClientStop advanced threats and rollback the damage caused by malware
  - Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
  - Product Menu Right Image
  - Capture Cloud Platform
    Capture Cloud Platform
    A security ecosystem to harness the power of the cloud
- Button Widgets
  - Products A-Z
    all products A–Z FREE TRIALS
Solutions
- Industries
- Use Cases
- Solutions Widgets
  - Solutions Content Widgets
    Federal
    Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
  - Solutions Image Widgets
Partners
- SonicWall Partners
- Partner Resources
- Partner Widgets
  - Custom HTML : Partners Content WIdgets
    Partner Portal
    Access to deal registration, MDF, sales and marketing tools, training and more
  - Partners Image Widgets
Support
- Support
- Resources
- Capture Labs
- Support Widget
  - Custom HTML : Support Content WIdgets
    Support Portal
    Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
  - Support Image Widgets
COMPANY
PROMOTIONS
- SonicWall Promotions
- Customer Loyalty Program
MANAGED SERVICES
Contact Sales

English English en

How can I configure a Site to Site VPN tunnel between a SonicWall and Linksys VPN Router?

03/26/2020 789 People found this article helpful 71,453 Views

Description

This article covers how to configure a site to site VPN tunnel between a SonicWall and Linksys VPN router in aggressive mode.

Resolution

SonicWall Configuration

Address Object For Remote Network

Log into the SonicWall.
Navigate to Manage | Policies | Objects | Address Objects.
Create a new Address Object for the network on the LinkSys VPN router end you wish to reach (LinkSys LAN).

SA Configuration

Browse to VPN, then Settings (default view for VPN).
Ensure that Enable VPN is selected.
Click Add.
Change the Authentication Method to IKE using pre-shared secret.
Name the SA, EXAMPLE:Tunnel to LinkSys VPN Router.
Enter the WAN IP of the LinkSys VPN router for IPSec Primary Gateway Name or Address.
Enter your shared secret, EXAMPLE:P@ss20140603.
Define Local IKE ID & Peer IKE ID. In this example the Local IKE ID is Yahoo.com and the Peer IKE ID is Google.com.
Select the Network tab.
Select Lan Subnets for Local Networks from the drop down box.
Select the address object previously created for the destination network.
Select the Proposals tab.
Configure DH group under IKE Phase 1 to Group 1.
Configure Phase 1 Encryption 3DES & authentication SHA1.
Configure Phase 2 Encryption 3DES & authentication SHA1.
Enable Perfect Forward Secrecy. And Select the DH Group as Group1.
Configure Phase 1 & Phase 2 Life Time 28800.
Select Advanced tab.
Ensure that keep alive is enabled on only one end of the tunnel, it would be mostly on the device which is running on the DHCP WAN IP. In this example it is the LinkSys VPN Router.
Select Enable Windows Networking (NetBIOS) Broadcast if you would like to pass NetBIOS across the VPN.

LinkSys VPN Router Configuration

VPN CONFIG

Navigate to VPN | Gateway to Gateway.
Edit the tunnel.
Define the Tunnel/Gateway.
Select interface WAN1.
Check the Enable option.

Local Group Setup

Select the Local Security Gateway Type as IP + Domain name (FQDN) Authentication.
Choose a domain name. EXAMPLE: Google.com.
Choose Local Security Group Type as Subnet.
Mention the IP address and subnet mask of the local network which are behind the Linksys VPN Router.

Remote Group Setup

Select the Remote Security Gateway Type as IP + Domain name (FQDN) Authentication.
Mention the IP address of the remote firewall. In this case it is the IP of the SonicWall firewall.
Choose a domain name. EXAMPLE: Yahoo.com.
Choose Remote Security Group Type as Subnet.
Mention the IP address of the network which are behind the SonicWall or the network which you want to access behind the SonicWall.

IPSec Setup

Select Keying mode as IKE with Preshared key.
Select Phase 1 DH Group as Group1.
Select Phase 1 encryption as 3DES.
Select Phase 1 Authentication as SHA1.
Mention the Phase 1 SA lifetime as 28800.
Enable Perfect Forward Secrecy.
Select Phase 2 DH Group as Group1.
Select Phase 2 encryption as 3DES.
Select Phase 2 Authentication as SHA1.
Mention the Phase 2 SA lifetime as 28800.
Mentioned the Pre-shared key. This key should be same on both the devices, SonicWall as well as LinkSys VPN router.

Advanced Tab

Enable the Aggressive Mode.
Enable Keep Alive.
Enable NetBIOS (If needed).
Enable Dead Peer Detection (If needed).

Related Articles

Categories

Not Finding Your Answers?

ASK THE COMMUNITY

Was This Article Helpful?

Stay In Touch