IPSEC Site-to-Site an Dial-In L2TP simultaneously?

brischt

Hi,

my VPN100 is configured to maintain a permanent site-to-site IPSec connection with another site. Works like a charm.

Now I wanted to add L2TP for Dial-In users. Unfortunately, I cannot get it to work, it seems like the VPN100 does not reply to the client. Reading through different forums and blogs, I believe plain IPSec and L2TP over IPSec cannot work simultaneously. Is that correct? If so, what whould you recommend as protocol for Dial-In users on Win 10 - IKEv2? Can that work at the same time as the IKEv1 site-to-site connection? (I would prefer to use the Win integrated VPN client, as this is the only one available when the user logs into the laptop, I believe)

Also, do you have any experience with DNS resolution in that case, as I have had quite cumbersome experiences with DNS via IPSec on Windows 10.

Thanks,

Kind Regards,

Roland

Zyxel_Stanley

Hi @brischt

It's good to hear your VPN connection is worked.  

zyman2008

All the client VPN type (IKEv1 with mod-config, IKEv2, L2TP over IPSec, SSL VPN) can work with site-to-site IPsec simultaneously.
All you need is a well IP address space planning and a right routing configuration.

You can refer this post https://businessforum.zyxel.com/discussion/2259/connecitivity-between-multiple-ip-sec-vpn-connections

Zyxel_Stanley

Hi @brischt  

Site-to-Site VPN and L2TP VPN can work simultaneously.

These are different VPN type, so configuration will different.

For L2TP tunnel you have to create another rule for L2TP client.

You can reference to FAQ to check your configuration first.

brischt

Cool, thanks to both of you - got it to work! I had to add a registry key as in

https://superuser.com/questions/1298513/l2tp-ipsec-vpn-fails-to-connect-on-windows-10-works-fine-on-ios

that's why it didn't work in Win10 outright.

Again, thanks!