Traffic from the LAN side of a SonicWall NSA appliance bound for a VPN'd network behind a SonicWall

Traffic from the LAN side of a SonicWall NSA appliance bound for a VPN'd network behind a SonicWall TZ 190W is dropped at the NSA appliance with the following error: "SA not found on lookup by SPI for outbound pkt."

Applies to:

 This article applies to the following firmware versions and product models:

• Category: Release Notes.
• SonicOS Enhanced firmware 5.1.1.1e
• Gen5: NSA 240.

Question/Topic:

Traffic from the LAN side of a SonicWall NSA appliance bound for a VPN'd network behind a SonicWall TZ 190W is dropped at the NSA appliance with the following error: “SA not found on lookup by SPI for outbound pkt.”

Condition/Workaround:

Occurs when there are multiple failovers on the SonicWall TZ190W from PPPoE WAN to WWAN and back.

Upgrading to SonicOS Enhanced 5.1.1.1e or newer resolves the issue