Questions[sonicwall](server)

I have a dell switch N1548

I have a sonic wall TZ 215

I have followed every blog and forum post i can find online and still cannot get my sonicpoints to hand out addresses from the sonicwall to wireless clients.

DHCP works fine for all others

Here is my running config from the switch

console(config)#show running-config

!Current Configuration:
!System     description "Dell Networking N1548, 6.2.5.3, Linux 3.6.5"
!System Software Version 6.2.5.3
!
configure
vlan 10
exit
vlan 10
name "Wireless"
exit
sntp unicast client enable
sntp server "us.pool.ntp.org"
clock summer-time recurring USA zone "EST"    
clock timezone -5 minutes 0 zone "EST"    
stack
member 1 3    ! N1548
member 2 3    ! N1548
member 3 3    ! N1548
member 4 2    ! N1524P
exit
ip domain-name "corp.haven-oakland.org"
ip name-server "10.2.0.10"
ip name-server "10.2.0.13"
ip host "hvnsw004" 10.2.0.4
interface vlan 1
ip address 10.2.0.4 255.255.255.0
exit
interface vlan 10
ip helper-address 10.2.0.2
exit
ip default-gateway 10.2.0.2
username "admin" password 45f315a95c02cea3a684f9ef61451288 privilege 15 encrypted
ip ssh server
ip ssh port 1025
!
interface Gi4/0/1
description "SonicWALL Uplink X6"
gvrp enable
spanning-tree disable
spanning-tree portfast
spanning-tree cost 20000
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/2
description "SonicWALL Uplink X6"
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/3
description "SonicWALL Uplink X6"
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/4
description "SonicWALL Uplink X6"
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/5
description "SonicWALL Uplink X6"
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/6
description "SonicWALL Uplink X6"
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/7
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/8
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/9
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/10
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
!
interface Gi4/0/11
spanning-tree disable
spanning-tree portfast
switchport mode trunk
switchport general pvid 10
switchport general acceptable-frame-type tagged-only
switchport access vlan 10
switchport trunk native vlan 10
exit
snmp-server engineid local 800002a203f8b156838a19
snmp-server community "public" rw
exit

Am i missing something in the switch or could it be the sonicwall?

I have setup the sonicwall according to dell BP and should be working

Thank you if any additional info is needed please let me know.

I'm attempting to import a certificate created by a CA I've set up in Windows using AD CS. I've done the following:

1) Created my own CA (MyCompany)
2) Enabled web services (mostly for ease of configuration)
3) Generated a certificate request on the Sonicwall itself
4) Used web services to sign the certificate
5) Imported the sign certificate into the Sonicwall ...this caused the certificate to show "No" for the Verified field.
6) Imported the CA's certificate.

This is where I get stuck. I attempted to import the CRL list, but get the following error: CRL Error - Verification failed using CA certificate. No further errors appear in the logs. Without the CRL list the certificate won't verify and it doesn't appear under the "Administration" page so I can select it for use via HTTPS.

Any ideas?

Edit: From Sonicwall when I attempt to use my HTTP published list:

07/02/2013 14:33:54.256 Alert   VPN PKI Cannot Validate Issuer Path         HTTPS        
19  07/02/2013 14:33:54.256 Alert   VPN PKI CRL validation failure for Root Certificate         MyCompanyCA      
20  07/02/2013 14:33:54.256 Alert   VPN PKI Failed to Process CRL from           http://crl.mydomain.com/Cert
Enroll/ CA: MyCompanyCA

This is I'm sure a very simple question for a server admin, but not so much for a programmer who doesn't want to break internet access for the entire company.

Our cable provider assigned to us two adjacent IP addresses. I would like to route certain traffic from the second ip address to a specific machine; but I am unsure how to set up the route. The X1 interface is set to WAN with subnet mask 255.255.255.224, which includes the additional IP address.

Is Network -> routing the correct place to set this? Do I need to create a new address object for just this single ip and use this as the source?

Any help will be greatly appreciated. Thank you in advance.

We're looking to move away from PFSense and CARP to a pair of SonicWall NSA 2400¹ configured in Active/Passive for High Availability.

I've never dealt with SonicWall before, so is there anything I should know that their sales guy won't tell me?

I'm aware that they had an issue with a lot of their devices shutting down connectivity because of a licensing fault, and they have an overtly complex management GUI (on the older devices at least), but are there any other big "gotchas" that I need to be aware of before committing a not insubstantial amount of money towards these devices?

_{¹If you're outside the US, the SonicWall global sites suck balls. Use the US site for all your product research, and then use your local site when you're after local information.}

I'm working with a pair of co-located CentOS Linux servers sitting behind a Sonicwall PRO 2040 Enhanced firewall running in transparent bridge mode.

These servers are having a strange problem downloading files more than a few megabytes in size. For example, if I try to wget or FTP a copy of the Linux kernel from kernel.org, the first ~1-2MB will download at 600+K/s, and then throughput will drop off a cliff to 1K/s.

I've reviewed all the firewall configuration settings for anything suspicious, but found nothing. More interestingly, I performed the same download with a Windows server sitting behind the same firewall, and it sailed right through at 600+K/s the whole way.

Has anyone seen this? Where should I start looking to troubleshoot this problem?