Secondary IP addresses on interface problem

PeterUK
PeterUK Posts: 3,316  Guru Member
100 Answers 2500 Comments Friend Collector Seventh Anniversary

USG FLEX 200H V1.21(ABWV.0)ITS-24WK35-0813-240800592

Howto add secondary IP address on interface? — Zyxel Community


There is no primary so I have
/ vrf "main" interface ethernet "ge4" ipv4 address "192.168.255.235/26"
/ vrf "main" interface ethernet "ge4" ipv4 address "192.168.255.253/26"
/ vrf "main" interface ethernet "ge4" ipv4 address "192.168.255.248/26"

With a VPN for interface Ge4 to nailed up to 192.168.255.243 my USG40 only that end is expecting from 192.168.255.235 which I think was the primary only the FLEX200H randomly picks how it sends VPN connection out from and so the VPN fails not much I can do so I had the other end nailed up to 192.168.255.235 to make it work for now.

So there need to be a primary.

Accepted Solution

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,291  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK,

    Since the virtual interface cannot set orders now, could you help to change the VPN setting > Network > My address from the interface to a fixed IP address? This should avoid randomly picking the IP address.

  • PeterUK
    PeterUK Posts: 3,316  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited September 9

    It is fixed

    The problem is when nailed up on FLEX200H side the source IP of ge4 LAN can pick from

    / vrf "main" interface ethernet "ge4" ipv4 address "192.168.255.235/26"

    / vrf "main" interface ethernet "ge4" ipv4 address "192.168.255.253/26"

    / vrf "main" interface ethernet "ge4" ipv4 address "192.168.255.248/26"

    The other end is expecting say 192.168.255.235 but the FLEX200H uses 192.168.255.248 as source when nailedup and so their is a mismatch.

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,291  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Answer ✓

    Hi @PeterUK,

    From your screenshot, the My Address part is still using the interface rather than fixing the virtual interface IP address. Please reference the below.

  • PeterUK
    PeterUK Posts: 3,316  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Hi Melen

    I over looked that option so that works

    thanks