VPN connection between USG Flex 200 and a draytek Vigor2865

Baydale

Hi ive setup a IPSec LAN to LAN connection i believe ive set both ends up correctly but im not getting a connection the Flex 200 is connected vias nebula i keep getting these logs

The cookie pair is : 0x964c3abc2f8f2298 / 0x0000000000000000

Recv:[SA][VID][VID][VID][VID][VID][VID]

Recv Main Mode request from ]

Send:[NOTIFY:NO_PROPOSAL_CHOSEN]

[ID] : Tunnel [SA_Claieville] Local IP mismatch

[SA] : No proposal chosen

Recv IKE sa: SA([0] protocol = IKE (1), AES CBC key len = 256, HMAC-SHA256 PRF, HMAC-SHA256-128, 2048 bit MODP; ).

Cheers Dan

Zyxel_Kay

Hi @Baydale

It looks like the VPN connection is being established between Nebula and non-Nebula devices, causing a local IP mismatch error. To better understand your setup, could you please provide your network topology and the application scenario for your VPN connection?

If you are setting up a site-to-site VPN between Nebula and non-Nebula devices, you might find this guide helpful:

https://community.zyxel.com/en/discussion/209/nebula-how-to-establish-site-to-site-ipsec-vpn-between-nebula-and-non-nebula-devices

Zyxel_Kay

Hi @Baydale

It looks like the VPN connection is being established between Nebula and non-Nebula devices, causing a local IP mismatch error. To better understand your setup, could you please provide your network topology and the application scenario for your VPN connection?

If you are setting up a site-to-site VPN between Nebula and non-Nebula devices, you might find this guide helpful:

https://community.zyxel.com/en/discussion/209/nebula-how-to-establish-site-to-site-ipsec-vpn-between-nebula-and-non-nebula-devices