-
[ATP/FLEX] What does "Partial VPN connected" mean on VPN orchestrator?
The status "Partial VPN connected" means not all VPN tunnels are connected successfully. For example, two Spokes have WAN1 only. However, WAN2 is enabled and select "Auto" outgoing interface in Site-to-Site VPN on one site. In the result, the VPN tunnel from spoke’s WAN2 will fail to establish. It is considered as…
-
[ATP/FLEX] How to restrict L2TP VPN access using Geo IP?
Create two security policy rules. In the following example, only Geo IP "Taiwan" is allowed to establish L2TP VPN. In the first policy, action: Allow, source: allowed Geo-IP, destination: Device, dst. port: 1701, 4500, 500 In the second policy, action: Deny, source: Any, destination: Device, dst. port: 1701, 4500, 500
-
[ATP/FLEX] Auth Fail with Cloud Authentication if use Remote Access VPN
Issue: Auth Fail with Cloud Authentication when you connected ikev2/l2tp VPN. Checking: In path: Organization-wide → Organization-wide manage → Cloud authentication 1)Please check you have allowd "VPN access" 2)Please check you already added the site to Authorized 3)Please check your Login type is Username or Email
-
What does the remote access VPN domain resolve to?
Question: What does the remote access VPN domain resolve to? Answer: The domain name is resolved to the WAN interface IP addresses instead of the Public IP addresses. The priority is WAN1 first, then WAN2. And yes, it would update automatically when the WAN interface IP addresses change.
-
[ATP/FLEX] Why does Remote Access VPN only allow one user to be connected at a time?
Why does Remote Access VPN only allow one user to be connected at a time? When another user is connected, the current user must log off. If you set subnet mask 192.168.18.0/32, only one IP address is available for pool of IKEv2 clients. It means only one IKEv2 client can be connected simultaneously to the site. We suggest…
-
[ATP/FLEX] How to route all traffic to IPSec peer gateway
When site to site VPN is configured between Nebula Firewall and the peer
gateway, we can use policy routes to force the subnet of Nebula Firewall to
access the Internet via the WAN connection of the peer gateway. The article instructs
how to configure a policy route on each device to route all traffic to the peer
gateway.…
-
[ATP/FLEX] How to Set up VPN area and VPN topology on Nebula site-to-site VPN
First of
all, you need to have a Nebula Professional Pack to implement this feature. Nebula
VPN Orchestrator provides software-defined design to build scalable VPN
topology within an organization. We can create multiple VPN areas within an
organization and each area has its own sites and VPN topology. The users need
Nebula…
-
[ATP/FLEX] How to establish Site-to-Site IPsec VPN between Nebula and non-Nebula devices
The
following is an example of setup site-to-site VPN between Nebula device(USG
FLEX 100) and non-Nebula device(USG40). Non-Nebula
device USG40(on-premises) has a public IP, but Nebula device USG FLEX 100 is
behind NAT. Configure
Steps Nebula
Device Configuration (USG FLEX 100) Navigate
to Configure > Firewall >…
-
[ATP/FLEX] How to Set up IKEv2 VPN tunnel and Authenticate with your RADIUS server on Nebula Gateway
Nebula Control
Center provides a VPN solution that allows remote VPN users to connect VPN
tunnels from Internet. This guide will assist in the configuration IKEv2 VPN tunnel
and authenticate with existing RAIDUS domain server. Set
up external authentication server setting Go
to Firewall > Configuration > Firewall Settings…
-
[ATP/FLEX] How to Set up IKEv1 VPN tunnel and Authenticate with your AD server on Nebula Gateway
Nebula Control
Center provides a VPN solution that allows remote VPN users to connect VPN
tunnels from Internet. This guide will assist in the configuration IKEv1 VPN
tunenl and authenticating with exist AD domain server. Set
up external authentication server setting Go
to Configure > Firewall > Firewall settings and…
-
[ATP/FLEX] How to Set Up L2TP over IPSec VPN with Cloud Authentication on Nebula?
Nebula Control
Center provides a VPN solution that allows L2TP VPN users to connect through
Cloud Authentication. This guide will assist in the configuration of Nebula
L2TP VPN with Cloud Authentication. Configure
Steps 1.
Configure VPN accounts for Cloud Authentication Navigate
to Configure > Cloud Authentication, click…
-
[ATP/FLEX] How to Set Up L2TP IPSec VPN with AD Authentication on Nebula?
Nebula Cloud provides VPN
solutions that can authenticate through an AD server for L2TP over IPsec VPN /
IPsec VPN. Configure
Steps Using Windows Server 2016
as the AD server 1. AD
server installation Install an AD Server and
set it as a domain controller. If installed in a virtual machine, make sure
that the virtual NIC…
-
[ATP/FLEX]How to configure the remote client VPN with 2FA on USG FLEX in Nebula?
IPSec VPN client with 2FA 1. Navigate to Configure > Firewall > Remote Access VPN and activate “Two-factor authentication with Captive Portal” 2. Go to Orgnization-wide manage > Cloud Authentication to create the VPN client, check the allowed to use Remote VPN and send the information to user. 3. Go to check the email and…