NetExtender users fail to get connected throwing an Error Failed to get vpn protocol on firmware 10.2.1.2 or above due to misconfigured protocol

Description

NetExtender users  fail  to get connected throwing an  Error:  "Failed to get vpn protocol"   on firmware 10.2.1.2 or  above due to misconfigured protocol

Cause

NetExtender Connection Issue  "Error:"  failed to get vpn protocol"


  • SMA 100 is on a process to introduce  to  Wireguard Protocol  and a client to function based on this Protocol.
  • This is an administrative configurable parameter.  Administrator's need to enable or toggle these protocols as per their requirements or deployment.
  • SMA 100  Post upgrade of  firmware version to 10.2.1.2 or above   the default setting for wireguard protocol on server/ Appliance  is  set to “SSLVPN”,
  • On Netextender client default  option is set in   “Auto” mode.
  • Administrators on Appliance misconfiguring protocol on either appliance or client  would cause client connectivity issues. 


Resolution

SMA 100 Appliance Configuration  recommended:


Change the configuration to let client/server have a common protocol. You may do either one of  the followings:

  • On server side, for “VPN Tunnel Type” select both “SSLPVN” and “Wireguard”
  • Or On client side, for Protocol, choose “Automatic”
  • Or choose both “SSLVPN” on client and server side
  • Or choose both “Wireguard” on client and server side


On SMA 100 firmware 10.2.1.2 or above :  Protocol type can be configured from Services | Settings | VPN TUNNEL TYPE SETTINGS


Image

NOTE: By default, when upgraded from previous version without Wireguard support, the default “VPN Tunnel Type” is “SSLVPN”.  Changing this to WireGuard would lead to Netextender failure.



Netextender Configuration recommendation and to leave this as default:

Image



Related Articles

  • How to Provision SMA1000 in Monthly Billing (MSSP Program)
    Read More
  • SMA 1000 Series Support Matrix
    Read More
  • How to Configure SAML 2.0 SSO with Microsoft Entra ID for SonicWall SMA 1000 Series
    Read More
not finding your answers?