SSLVPN disconnects and oddness with zone “LAN”

PeterUK

VPN300 V5.30

This is a odd I have SSLVPN on port 443

Ge3 zone LAN1 192.168.255.247/255.255.255.192

Ge5 zone LAN 192.168.255.49/255.255.255.240

Two firewall rule from LAN to Zywall and from LAN1 to Zywall HTTPS

In this setup I connect to SSLVPN to 192.168.255.247 get disconnected within xxmins if idle.

And if I do a SSLVPN to 192.168.255.49 it disconnects right away but if I change the Ge5 zone to LAN1 it connects and then disconnected within xxmins if idle.

Omnia

we have the same problems with various ATP 5.30 firmware. 

PeterUK

Update workaround it seems after many years of Zyxel doing SSL VPN on port 443 with logon on the same port is now a problem and the SSL VPN is stable on a given set port other then 443 in config > VP >SSL VPN global setting

As for uptime workaround oddly if the DHCP server lease is set 2mins for a client the connecting SSL VPN stays up guess it acks as a keep alive? 

Zyxel_Kevin

Hi @PeterUK,
Did you mean you solved it after change SSL Port to others?
If the issue still persist, Kindly feel free to contact us.Thank you
Kevin

PeterUK

No not solved by changing the port for the main issue disconnected within xxmins if idle.

Changing the port fixes the zone problem like zone “LAN” where the SSL VPN will not connect at all but zone “LAN1” does even if firewall rule is correct for zone “LAN”.

Zyxel_Kevin

Hi @PeterUK,
Our team are investigating  VPN disconnection event recently.
I will update it if there is any news.
Thanks
Kevin

Zyxel_Kevin

Hi @PeterUK,

We have found the cause. We will release weekly firmware next week to fix the issue

Thank for your patience.

Kevin

Zyxel_Kevin

Hi @PeterUK,
Please find the following weekly firmware. 
https://community.zyxel.com/en/discussion/13502/zld-v5-30-wk20-firmware-release/p1?new=1
Kevin

PeterUK

Thanks need to do more testing but the VPN disconnection looks fixed on a different port then 443

But if WWW is port 443 and VPN is port 443 with zone LAN it disconnects right away log show.

User sslvpn1 has been denied access from HTTPS

Failed login attempt to SSLVPN from http/https (incorrect password or inexistent username)

yet login is correct and if I change zone to LAN1 it works

Zyxel_Kevin

Hi @PeterUK,
Could you check the issue after upgrade the weekly ?
And please share the configuration via Private Messages if the issue persist.
I will try to reproduce it . 
Kevin

PeterUK

Yes the issue happens after the upgrade will send you the config