USG300 - L2TP over IPSec behind NAT

dpipro

Hello,

does ZyWALL USG300 support L2TP over IPSec when behind a NAT router?
Topology:
USG300 (ge4: 192.168.1.63) -- NAT Router CPE (With Public IP) -- Internet -- Android Smartphone with 4G Connection

The ZyWALL has the firmware rev 3.30(AQE.7)
Thanks in advance.

Best regards,
dpipro

Alfonso

Hi @dpipro

I suppose that the Zywall is the vpn server.

So, some nat rules must be configured on the NAT Router CPE:

The following ports should be redirected to the Zywall USG device:
- 500 UDP
- IP protocol 50
- IP protocol 51
- 4500 UDP

It should work.

Best regards

dpipro

Hello @Alfonso

Thank you for your post. It didn't work out. :-(
I have another customer with a USG60 on the same conditions and it works perfectly.

Maybe USG300 is too old to have support for L2TP behind NAT, don't you think?

Best regards

Alfonso

Hi @dpipro

I suppose that USG300 supports L2TP behind NAT, but I do not have one to confirm.

Maybe one USG300 owner can verify it.

Zyxel_Charlie

@dpipro
The USG300 does not support the L2TP behind NAT.
You may consider the USG310 which does support this scenario.
Charlie