-
[ATP/FLEX] Full guide to set up Palworld Dedicated Server with Remote Access VPN on USG FLEX
This post is a showcase and tutorial for educational purposes only. There is no commercial cooperation or affiliation between Zyxel Networks and Pocket Pair, the developers of Palworld. This guide aims to demonstrate the capabilities of the USG FLEX series in setting up a secure gaming environment. Palworld is an…
-
How to show VPN config on Nebula Firewall
Question: How to show VPN config on Nebula Firewall ? Answer: Log in Firewall by SSH and perform "debug sdwan show vpn running-config" the VPN config will be present as following format
-
Non-Nebula VPN montior show connected, but no traffic can't pass through how to check ?
Question: Non-Nebula VPN montior show connected, but no traffic can't pass through, how to check ? Answer: 1)Please log in Firewall by SSH and verify the VTI is exist and up The VTI interface is VTI_{Your VPN name} with vtiX 2)If you have manual VTI address, checking you have correct routing settings 3)For this…
-
Non-Nebula VPN peer is connected but no traffic after Nebula 18.30 is released
Question: The connectivity status of Non-Nebula VPN peer is connected but no traffic runs on inbound and outbound after Nebula 18.30 is released. How to resolve this issue? Answer: It is a bug on Nebula 18.30. Please follow the steps to resolve the issue. Go to Configure > Firewall > Site-to-Site VPN > Non-Nebula VPN…
-
Site-to-Site VPN is disconnected after Nebula 18.30 is released
Question: Why is Site to site VPN disconnected after Nebula 18.30 is released? How to resolve this issue? Answer: It is a bug on Nebula 18.30. To resolve this issue, follow the steps to recover Site-to-Site VPN connection. Go to Configure > Firewall > Site-to-Site VPN. For Secondary interface, select "None". For Nebula…
-
Does the Zyxel firewall support NordVPN?
Question: Does Zyxel allow VPN client mode like NordVPN? Answer: No, it does not support this feature in the current design.
-
[ATP/FLEX] Why non-nebula VPNs only work with LAN1 while with LAN2 the tunnel does not work?
The non-Nebula VPN setting doesn't support for route multiple IP segments from local site to remote site. If you have multiple IP segments would like pass-through into VPN tunnel, you have to configure "VTI interface" and "policy route". You can refer to this article.
-
How do I manually add a VPN profile on an iPhone for an IKEv2 VPN connection with Nebula Firewall?
Question : How do I manually add a VPN profile on an iPhone for an IKEv2 VPN connection with Nebula Firewall? Answer : The user can not only import the .mobileconfig file downloaded from the firewall to the iPhone's IKEv2 VPN connection but also manually add an IKEv2 VPN profile on the iPhone. For example, the steps below…
-
How to Enable VPN Split Tunneling in SecuExtender VPN
Question: Is it possible to use split tunneling with SecuExtender VPN when using IKEv2, and how can we set it up? Answer: Yes, it is possible to enable split tunneling on the SecuExtender VPN client, although some manual configuration is required for VPN settings. Steps to Configure Split Tunneling: * Edit your VPN…
-
How to resolve L2TP VPN connection issues on Nebula firewall?
Question: Why can't my iPhone connect to the L2TP VPN server of Nebula firewall? What settings should I check on Nebula? Answer: If your iPhone shows the error "The L2TP VPN server is not responding" follow these steps to troubleshoot: 1. Verify if the WAN IP address assigned to your Nebula firewall is private or public:…
-
How to change the L2TP VPN Pre-Shared Key on Nebula?
Question: How to change the L2TP VPN Pre-Shared Key on Nebula? Answer: On Nebula, go to Configure > Firewall > Remote access VPN > L2TP VPN server. You can modify the Pre-Shared Key of the field "Secret".
-
Is SecuExtender VPN Client chargeable?
Question: Is SecuExtender VPN Client chargeable? Answer: Yes, SecuExtender VPN Client is a subcription based software. You can vist Zyxel Marketplace and go to License Store > Software Licenses > VPN Client to purchase SecuExtender license.
-
Why the IKEV2 VPN failure while adding VPN settings on Windows manually.
Question: Why the IKEV2 VPN failure while adding VPN settings on Windows manually. Answer: Since on-cloud firewall does not support the default proposal form Windows. We recommend using script(.bat) to deploy as instead.
-
Why can't I set up a Nebula Site-to-Site VPN between devices in different organizations?
If you are trying to set up a Nebula Site-to-Site VPN between two USG FLEX devices registered under different Nebula organizations, you will encounter issues because Nebula VPN only supports devices within the same organization.
-
Does USG LITE 60AX support certificate to connect VPN?
No, USG LITE 60AX only supports the account/password method to connect VPN.
-
How to avoid unexpected routing issues when enabling both IPsec VPN and L2TP VPN simultaneously?
Scenario : The user may need to enable both IPsec VPN and L2TP VPN remote settings simultaneously. How can unexpected routing issues be avoided when enabling both IPsec VPN and L2TP VPN at the same time? Answer : STEP1. Navigate to Site-wide > Configure > Firewall > Remote access VPN STEP2.Please ensure their Client VPN…
-
How to establish an VPN connection with a Nebula firewall by the macOS Sonoma native VPN client?
Question : After updating to macOS Sonoma, if you cannot establish an IKEv2 VPN connection with the Nebula firewall, how do you resolve this problem? Answer : Since there are changes to the VPN Phase 1 and Phase 2 parameters for macOS Sonoma's native VPN client, please modify them accordingly to allow the remote VPN to…
-
[ATP/FLEX] How to test a ping from one site to the remote VPN site on Nebula firewall?
Question: How to test a ping from one site to the remote VPN site on Nebula firewall? Answer: Firstly, ensure the VPN tunnel is established. Then access SSH or console of one Nebula firewall. [ATP/FLEX] How to access SSH service of Nebula Firewall? On SSH or console, enter the command to ping the client located in the…
-
Why is My VPN Not Connecting Even Though Settings are Identical?
Q: A specific user cannot connect to the VPN through their client, even though their settings are identical to others. What could be the issue? A: Sometimes, VPN connection issues can occur despite having identical settings, especially after Microsoft patches the system. In such cases, try the following steps: * Review the…
-
Is it possible to use SSL VPN on Nebula firewall?
Question: Is it possible to use SSL VPN on Nebula firewall? Answer: On Nebula, only IPSec VPN and L2TP VPN are available in Firewall > Remote access VPN. If you need to use SSL VPN on Nebula firewall, use Cloud Monitoring Mode instead. [ATP/FLEX] How to set up Nebula Monitor Mode? I want to use cloud monitoring mode, but…
-
Why is there Network Congestion on ATP700 VPN?
When experiencing network congestion on your ATP700 VPN, you might observe logs indicating full TX queues. This issue can stem from several factors: * Bandwidth Management (BWM) limiting traffic. * Interface ingress/egress bandwidth configuration. * Internet Service Provider (ISP) bandwidth restrictions. To address the…