VPN by Domain Name not working for remote access VPN

Options
PeterUK
PeterUK Posts: 2,863  Guru Member
First Anniversary 10 Comments Friend Collector First Answer

USG FLEX 200H V1.20(ABWV.0)ITS-m4447

Domain Name / IP for Domain Name like dnsip11.ddns.net that points to 192.168.255.235 not working when PC on the same LAN but if I use IP or interface it works for downloading the configuration get “policy match error” when using dnsip11.ddns.net when I tested this on V1.10 it I'm sure it was working working

All Replies

  • PeterUK
    PeterUK Posts: 2,863  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    update

    I went back to V1.10(ABWV.0)b9s3 and it tested fine for Domain Name then booted to V1.20(ABWV.0)ITS-m4447 and now its fine….so may be a reboot was needed and the settings are not updating in the Flex?

  • PeterUK
    PeterUK Posts: 2,863  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited May 11
    Options

    update

    It seems the FLEX H does not like Domain Name so use IP or interface but good news is behind NAT when using interface works if you use Domain Name you run into “policy match error”

    so if you want to use a DDNS you have to set to Domain Name download the setup Configuration then change back to interface and for Auto Certificate download both Domain Name and interface and copy the .crt over to the Domain Name Configuration.

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,101  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hello @PeterUK

    May we know whether this symptom persists for now? Thanks.

  • PeterUK
    PeterUK Posts: 2,863  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited May 14
    Options

    yes you can't use set to  Domain Name give you “policy match error” on the VPN client.

    if you quickly set to a Domain Name and click on the client VPN it works but that likely because the change over was not made then next connection “policy match error” only setting to interface is stable