Why can't I ping servers over VPN when IKEv2 VPN is established on SecuExtender?

Zyxel_Emily
Zyxel_Emily Posts: 1,396  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
edited August 23 in VPN

Question:

IKEv2 VPN is established on SecuExtender. However, I cannot ping the gateway IP of USG FLEX or servers in LAN.

Answer:
Review the Two-Factor Authentication (2FA) settings:
    1. Navigate to Object > Auth. Method > Two-Factor Authentication > VPN Access.
    2. Check if 2FA is enabled for all VPN services and users.
    3. If the user doesn't have an email address or Google Authentication setup, disable 2FA for them or ensure they are properly configured.

If 2FA is not required, you can disable it to resolve the issue. Make sure that all VPN clients have 2FA settings configured if 2FA is necessary.

By following these steps, your VPN client should be able to successfully ping the router and server.