VPN BETWEEN ZYXEL ATP200 AND FRITZBOX! 7590

zyman2008

@Kepir
Disable the 1st policy route.

Kepir

zyman2008 said:

@Kepir
Disable the 1st policy route.

Thank you,

but still the same problem.

Zyxel_Stanley

Hi @Kepir
What's your client IP address and destination IP address in your test?
In current VPN setting, USG could handle route traffic from "172.16.0.0/22"  to "192.168.178.0/24".
If your IP address doesn't include in these IP segments, then traffic route will not work.

Kepir

Hello Stanley,
Source ip is 192.168.178.188 and 172.16.0.5 for Destination.

Kepir

And,

as you can see in the images the ping from usg ( 172.16.0.1 )  to fritzbox ( 192.168.178.1 ) also did not work, 

Zyxel_Stanley

Hi @Kepir
For troubleshoot this issue, it requires captures the packets on both of PCs on each sites.
Is any capture tools on FRITZBOX! ?
You can send ICMP from USG site PC (172.16.0.X) to 192.168.178.X and make sure if "Outbound" traffic has increased in Monitor > IPSec View.
According to troubleshoot FRITZBOX! site, you may contact to FRITZBOX support's help continually.

Spyrtsat

Hello,

I have been having the same issue with a usg 110 and a fritzbox 7590AX. I was able to establish site to site connection although only if i used "Any" in the "Peer ID Type"of the VPN Gateway. Using IPv4 and the wan IP of the fritzbox was giving me the error "Phase 1 peer ID mismatch". Tried using the myfritz.net address too but was getting the mismatch error again.

And similarly, after the connection was established i was unable to communicate between the two network. Pings from the fritzbox to the usg and the other way arround would time out and no access could be established to devices from the two networks.

Can i please ask if there was a solution in the end for this issue?

Any idea as to why it doesn't work with IPV4 Peer id type and it needs any?

Thank you in advance.