Accessing shared folders over IPSec Site to site VPN

Davidcloude2023

https://community.zyxel.com/en/discussion/comment/50087#Comment_50087

that is the problem! i dont get the logs at all, i disabled the firewall on my ISP router for sure and nothing. i have included the screenshot from my policy control rules.

Thank you for your time.

The ipsec site to site vpn gives that the connected is established.

Tunnel [GW_To_OldOffice:Con_To_OldOffice:0x6884d946] built successfully


Office 2 (New_Office):

Office1 routing:

Office2 routing:

Davidcloude2023

https://community.zyxel.com/en/discussion/comment/50088#Comment_50088

is it possible that ESP packets are getting blocked?

PeterUK

https://community.zyxel.com/en/discussion/comment/50103#Comment_50103

Yes that could be one reason because you don't have either USG having the WAN IP behind other NAT routers that you need to forward ports.

Have you a rule to allow inbound UDP port 500, 1701, 4500 and protocol 50 from WAN to Zywall?

Davidcloude2023

https://community.zyxel.com/en/discussion/comment/50105#Comment_50105

i have no rules set and not only the one in this picture on both zyxel devices. i can see that AH and ESP are in allow_from_ wan to zywall service group.

i have 4500 and 500 and 1701 ports forwarded in the isp router to test if it works but i have the same results!.

is it possible if you have time that you can connect to me through teamviewer or privatly. thank you for taking much of your time.

Davidcloude2023

Peter fixed and solved the routing problems. 🙏 thank you

ionelpanciu

Hello. I have the same problem, only that I have IPsec site-to-site but in a LAN. Class 1.0 so I can connect with 5.0. Connectivity is through 2 antennas that are part of class 1.0. I managed to do site-to-site VPN but I can't see the computers from one building in another class.

If you can help me, that would be great. Thank you