Several VPN gateways USG FLEX 500

RiKa
RiKa Posts: 8
First Anniversary First Comment

A quick question about the USG FLEX 500. Is it possible to set up several VPN gateways in parallel?
I want to implement the following scenario:

VPN GW1 is set up and running. Users can access the internal LAN via L2TP/IPSEC from their devices.

VPN GW2 is new and should now connect our new office directly to the site-to-site VPN of the head office. A: USG60W > USG FLEX 500

Thanks for an answer

All Replies

  • PeterUK
    PeterUK Posts: 2,702  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer

    Yes that should be possible.

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer

    I'd love to know how it should be, if you can @PeterUK

  • PeterUK
    PeterUK Posts: 2,702  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited August 2023

    They have L2TP/IPSEC working for remote devices so all they need is the site to site.

    Here is a run through

    VPN gateway

    IKEv2

    interface WAN1

    peer gateway

    You need to know which end or both to be nailed up Static Address (can use domain name) to connect to the other end or Dynamic Address for the other end to connect to this end to be Site-to-site with Dynamic Peer

    uncheck Enable Two-factor Authentication

    VPN connection

    Nailed-Up on one of the ends

    Site-to-site with Dynamic Peer or Site-to-site depending how you setup VPN gateway

    set your local/remote policy

    routing rules add if needed

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer

    Thanks for sharing.

Security Highlight