"No proposal chosen" VPN IPSEC L2TP Connection between Zyxel USG50 flex and MacOS Sonoma
Hi,
due to the SSL_VPN Client 1.2.6 for MacOS ist EOL we try to switch from SSL_VPN to L2TP IPSEC VPN. I configured everything like in the description even the encryption to AES256/SHA256 which seems to be nessesary for Sonoma.
But i only got this when i try to connect:
my config for the Gateway is:
whats wrong?
best, moe
All Replies
-
Hi @moe5k ,
Please try using these proposals and check if the issue is resolved.
Engage in the Community, become an MVP, and win exclusive prizes!
0 -
Hi Zyxel_Judy,
thy for your reply.
Meanwhile i could manage to establish the connection Phase1 (at least with IKEv1) and even Phase2 (at least with MacOS, not yet with Win10). But now i am struggling with the the routing
inside the VPN-Connection. I cannot only reach the internal networks when i enable in the client that all the traffic should go via VPN. Is it possible to tell the (MacOS/Win) client to use only the VPN if network YXZ is used?
best, moe0 -
Sorry … my Request was may be a bit confusing..
What i mean is:
i need to send all traffic trough the tunnel otherwise the routing to the remote network does not work.
Any suggestions?thx moe
0 -
unless the VPN client can send traffic out side the the VPN by default the VPN client sends all traffic down the tunnel.
have you setup a policy rule to allow from VPN zone to given LAN?
0 -
thx for your answer.
Yes the VPN-Zone can send traffic to the LAN behind the Zywall. But only as long i force ALL traffic to the tunnel everything is fine. But when i disable the option "send all traffic through VPN Connection" then MacOS tries to reach the remote LAN via its normal interface what of course not works.
We use the MacOS integrated VPN-client not the IPSEC-client from Zyxel. Does this makes the diffrent maybe?0 -
So in windows you can do this option by PowerShell with "use default gateway on remote network" disabled on VPN TCP/IP settings
add-vpnconnectionroute -connectionname "VPN name" -destination "192.168.138.0/28" -passthru
or
add-vpnconnectionroute -connectionname "VPN name" -DestinationPrefix "192.168.138.0/28" -passthru
Not sure about MacOS
(1) Split Tunneling - L2TP & IPSec SecuExtender – Zyxel Support Campus EMEA
0 -
Yes, i think it is possile to set the routes for that in MacOS too.
But i don´t want to force my users to do that.I thought may be there is an option to set routes for remote networks automatic after the VPN-Connection is established?
0
Categories
- All Categories
- 414 Beta Program
- 2.3K Nebula
- 134 Nebula Ideas
- 92 Nebula Status and Incidents
- 5.5K Security
- 190 USG FLEX H Series
- 262 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 40 Wireless Ideas
- 6.2K Consumer Product
- 238 Service & License
- 376 News and Release
- 80 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 70 Security Highlight