Two usg 310 vpn ipsec site-to-site

neilos2015
neilos2015 Posts: 6  Freshman Member
First Comment
edited April 2021 in Security
Hello I have two usg 310 and I have success connect my two office with a vpn ipsec, everything ok but when I add a dmz on another interface with another range ip (internal) the vpn still connect but the device stop to dialogate. Why? Can someone help me?

All Replies

  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,386  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary

    Hi @neilos2015  

    The traffic transmitting between 2 USG VPN tunnel are worked by routing table.

    It may effects by routing/ policy control rules.

    So you can check:

    (1)   Does new IP address is conflicted in your USGs ?

    (2)   Does VPN traffic is blocked by policy control rules?

    (3)   Go to Maintenance > Packet Flow Explore and check if any routing effects to your VPN tunnel.


    Stanley

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）