USG20-VPN, L2TP/IPSec, Static client IP ?

DaG2942

Hi,

I’ve configured a USG20-VPN for L2TP/IPSec VPN server.

I’ve configured some Windows VPN Client to connect to this Server.

It works!

Clients receive an IP in range set in Server (IP_Range_Pool)

But now, how/where to configure the USG20 to Reserve one specific static IP for one specific Client ?!

I have tried somethings in the server but no success (and breaking VPN…).

I have also tried in the client side (fixe IP on VPN virtual connector) but no success (and breaking VPN…).

How can I to reserve static IP ??

Thank you verry mutch.

ticsystems

I have the same problem. When setting a private ip, it does not connect. It only works if I set the first or last IP of the pool.

DaG2942

Thanks.But not a solution.Moreover, I tried your tric : Set the first or last IP of the pool, But it don't work for me !
Are we alon ?

mMontana

DaG2942 said:

But now, how/where to configure the USG20 to Reserve one specific static IP for one specific Client ?!

What are you trying to achieve?
It's not necessary a static IP for create policy rules, you can create rules also on users as object

DaG2942

Hi,

Not a problem of rules or other setting for the client side.

For some specifics industrial communication protocols, machines on the VPN server side have to be configured (statically) with the static IP of the machines into the VPN client side. (And reverse, but that is no problem)

The question is how to do this, not why. But if you have idea…

If I can reserve IP client by user, I would by happy!

(I don’t well know USG20 and VPN…) (and English, sorry)

Thanks.

Zyxel_Cooldia

Hi @DaG2942,
The L2TP client cannot be assigned as static IP. But this can be achieved by using Zyxel IPSec VPN Client.
Zyxel IPSec VPN client download link:
https://www.zyxel.com/cn/zh/products_services/VPN-Client-Software-SecuExtender-Software/ipsec-vpn

DaG2942

Hi,

Ha, ok, Zyxel IPSec VPN Client is a software, not hardware as I thought !!

Is it license-free?

Not tried yet (cannot yet), but:

In the sample, the Zyxel VPN Client address is 20.20.20.11 is INSIDE the configured address pool for dhcp client (in server). What appends if a ‘dynamic’ client (normal Windows VPN client) has already this address!!?

In order to avoid this, is it possible to set the Zyxel IPSec VPN Client address out of the pool address (ie 20.20.20.9) ?

 

Thank again!

Zyxel_Cooldia

Hi @DaG2942,
It's not free license, and the address assigning must in pool range.

mMontana

Feature request: user-related IP reservation for SSLVPN and L2TP.