L2TP VPN Connection on USG Flex 200 V5.39(ABUI.0) | 2024-08-22
I'm trying to configure a VPN on this device. Client can connect correctly. It is ok. If client ping 8.8.8.8 it works. However if client try to navigate www.google.com or some other addresses dosn't work. Cannot understand why dosn't work. I think some rules is missing. In attachment the configuration i did. Can someone help me? Thanks. CB
Accepted Solution
-
I solved the problem. In the static rule i changed next hope from the Trunk to the specific WAN channel. I don't know why it dosn't work with trunk setting. I checked trunk setting and there was only the wan channel. So it should be the same. But it seems not.
0
All Replies
-
seems odd you can connect and ping 8.8.8.8 but not get to google site.
can you DNS and that the DNS uses your connection
check your logs for blocked access
you can make a routing rule for the VPN if needs
incoming tunnel VPN
next hop WAN1
0 -
check your logs for blocked access → nothing result blocked
you can make a routing rule for the VPN if needs → i did. you can see the rule in the last page of the pdf document i uploaded in the post. It is done as you said.
0 -
so can you DNS?
i did. you can see the rule in the last page of the pdf document i uploaded in the post. It is done as you said.
remove rule 1
0 -
so can you DNS?
what do you mean ?
0 -
I've an other similar VPN. Already configured months ago. It worked in the past. Don't know till when. But in august i used it. Now it dosn't work and it has the same problem too. I didn't change anything. Since a long time. Cannot understand what is happening. Maybe a firmware upgrade?
0 -
I understood what you mean. No. Doesnt DNS
0 -
Do security policies allow from L2TP to "DNS" to Google or other external ip addresses?
0 -
Hi @Antares3000 ,
You also can share the remote session information with us to access to your firewall directly for further investigation? If yes, please check the steps on your Community inbox.
Engage in the Community, become an MVP, and win exclusive prizes!
0 -
I solved the problem. In the static rule i changed next hope from the Trunk to the specific WAN channel. I don't know why it dosn't work with trunk setting. I checked trunk setting and there was only the wan channel. So it should be the same. But it seems not.
0
Categories
- All Categories
- 414 Beta Program
- 2.3K Nebula
- 134 Nebula Ideas
- 92 Nebula Status and Incidents
- 5.5K Security
- 190 USG FLEX H Series
- 262 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 40 Wireless Ideas
- 6.2K Consumer Product
- 238 Service & License
- 376 News and Release
- 80 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 70 Security Highlight