-
SSO entraID
hello, an other question, does nebula support SSO or SAML with Microsoft Entra?
-
Client VPN access to site A and B
Hi I am trying to create a senario link the one in the picture. Now: VPN Client can connect to Site A and access local resources. Site to Site VPN between Site A and Site B is working. I want users on VPN Client to be able to acces both Site A and Site B, througth the Site to Site VPN. How to do that?
-
Wan fail-over setup with site to site VPN
I have a test setup with dual wan (4 public IPs) and VPN setup with "Primary" and "Secondary". also setting the ip as 0.0.0.0 instead of interface. My understanding is with this setup wan should fail-over if one goes down. (Wan trunking is setup up as least load first) It seems to fail-over but when I ping the other site,…
-
IKEv2 Disable Split Tunneling not working
I want to set up IKEv2 VPN Connection where I want my cliënt to be able to use the remote internet connection, so we can use the fix WAN IP on the server side. I set SecuExtender to Disable Split Tunneling and I added a policy route on the flex with IKEv2_VPN as member, Source address the IKEv2 pool and as Next-Hop: Trunk,…
-
USG FLEX 500 HA mode
Hello, Does USG FLEX 500 support acitve/passive HA in none cloud mode? Cannot find any documentation on how to set it up, if anyone can share it please ? I know in Nebula it is not supported yet, but I've been told it can do HA in none cloud mode.
-
VPN with 2FA don't work
Once the VPN is set up, the screen asking for the verification code does not appear. How can I make the screen appear? I have already tried with different types of VPN and enabled the port. Can anyone suggest a solution? Thanks
-
IPSEC VPN behind a NAT
I am try to setup an IPSEC VPN, between and USG 310 and USG 20W. But the USG 20W is behind a NAT, because the internet provider give the service behind a NAT. I try to setup but even in the NAT Traversal flag is on I cannot make it working. Below the logs, do you you have any suggestion? No. Date/Time Source Destination…
-
LAN interface Failover
Hello guys I have an USG 1100 with an physic interface (internal) like 172.16.0.254 with a policy route that send all traffic to 172.16.0.1(another router) for all destination network 172.16.0.0/16 I want add a failover interface (172.16.0.253) that route a secondary router (172.16.0.2) when primary is down. I saw failover…
-
Dual networks - where WAN2 is simply the LAN of the other network - cant talk
Two companies in the same office both have their own networks, and their own (different) ISPs. Neither company is paying for static IPs from the ISPs, so they each only get only 1 dynamic IP. Thus, to have a backup Internet connection, I connected WAN2 of each company's firewall to the LAN of the other. These companies…
-
USG flex 100 import a public certificate
I am trying to import a public certificate, which is used by public CA. But if i try .pem the answer there is no a certificate request If i try a PKCS12, the answer is; format not supported firmware is the last V5.39(ABUH.1) / 2024-11-16 03:58:40 How i can import the cerificate.
-
Connect USG Flex 200 to zywall 110
Hi there, i`m not a pro but i have to connect two Firewalls via WAN Ports. Setup is as follow: USG Flex 200 WAN 1 - Connection to World (ETH to ISP) WAN 2 - 192.168.10.1 - 255.255.255.252 - gw 192.168.10.2 (to zywall 110) LAN 1 - 192.168.178.0/24 Routing set for Incoming any - source any - Destination 10.1.1.0/24 - next…
-
Setting up Site-to-Site VPN with multiple wan IP on both sides
I see the primary and secondary Peer Gateway address, which would be for the other site but what if "My address" also has 2 IP's for load balancing/failover? I think if I was to select wan 1 or wan 2, it would not failover correctly when one of the link is down. any help would be appreciated. Thank you.
-
USGFLEX100 VPN IPSEC IKEV2 PROBLEM f/w : 5.39 ABUH.1
i have this problem in only this site cannot connect with IPSEC VPN Can you help me ? I join the log
-
Zyxel Flex 500 Fail over
In dual wan setup, if the trunk is "active" and "active, the failover doesnt seem to work. However, if its setup as "Active" and "Passive", failover works flawlessly. Does failover only work in "active" and "passive" setup?
-
samsung51 zonder wpa 3 op modem aanluiten
-
USG Flex H series "no sooner than" roadmap for missing functions/features
Is their a roadmap for when the missing functions/features in release notes 1.10 might be finished ("no sooner than")? Of course there may be other items such as a config file converter, or a means to convert USG Flex licenses to series H. 50 functions/features or so no doubt means a small number of them will not perform…
-
ADP hits are sporadical, rarely from same IP. Do you add the IP's to blocking rules?
Please elaborate a bit why yes respectively no, thank you.
-
Does ADP take into consideration the GeoIP and the rules with blocked ranges?
Does ADP take into consideration the blocking rules entered in the GeoIP? I have for example blocked specific countries, and still there are often ADP hits from these blocked countries. I am aware tha the GeoIP database for any country or continent may not include the latest status for public IP ranges, but nevertheless -…
-
USG20-VPN configuration for MacBook Air (sequoia) VPN connection
Hello, Could anybody please provide step-by-step setup how to configure Zyxel usg20-vpn firewall/router to be able to establish secure VPN connection with MacBook Air updated to macOS Sequoia (via native macOS VPN client) ? Thank you. ZB
-
USG60W - connect from IPSEC connected site to Web GUI
Hello, I am trying to solve problem with connection to router administration. I have 2 sites succesfully connected thru IPSec. I am connected to site A with SSL VPN. Site A is connected to site B thru IPSEC. I can access devices in Site B network. But I cannot access router administration website. Log from site A: Log from…