Hi All, I have one NSG behind a cable modem, and one NSG behind a 4G modem. As I having trouble to find which NSG to blame for not connecting to each other I am trying first to connect from my mobile to the NSG, so I can check them separately, assuming that helps to find how to connect both NSGs to each other. With help of this forum I got a VPN connection from my mobile to the NSG behind the cable modem: https://businessforum.zyxel.com/discussion/comment/7819#Comment_7819 Thanks Nebula_Jason! So I guess the port forwarding and NAT traversal settings for that NSG are ok. I did the same type site-to-site config for the NSG behind the 4G modem, and I opened the same ports (500, 4500) on the 4g modem as I did for the cable modem. However I can't connect from my mobile to that NSG. I don't understand why there is a difference. I suspect this is related to not being able to get a VPN setup between both NSG's. From the NSG behind the 4g modem in the NSG event log I don't see attempts to connect from mobile, so maybe it is related to IPv6, or something else different in that situation. Any tips on what settings to check, or config changes to make? Mike

Hi all, I found it! For other newbie's like me, I overlooked several things probably logical for more the more experienced: * The event log of the NSG updates very slow, can take 5 mins to see new events (which made me assume to quickly something wasn't arriving/working) * The 4g modem switched IP during my tests which I didn't notice (I first wanted it to work before setting up ddns) * The menu of the 4g modem was confusing, I thought I had setup port forwarding on "LAN IP Filtering", but I had to do this under "Virtual Server" * During the many tests I had created an overlapping VLAN, and that (I guess, or something else) caused the VPN active state to switch to off, on the menu: Organization->VPN Members: the "Join member" buttons were turned off (which I am sure were on before) * Not sure if it mattered, but the rule I had created for the non-nebula device, as both the NSGs are behind a modem were not used, so I disabled them The original plan I had to connect my mobile first also to the NSG behind the 4g helped to see some of the mistakes, but funny enough I still cant do this, but I got the NSG's connected which was my goal :-) I hope it helps someone else! Mike

[NEBULA] VPN between two NSG100 devices (both behind NAT)

All Replies

Zyxel_Jason Posts: 410 Zyxel Employee

May 2019

Hi @MikyMike,

If you want to change the WAN IP configuration, you need to access the NSG via WebGUI.
The configuration page is on WebGUI, not on NCC.(Configuration > Interface)

Hope it helps.

Jason

Engage in the Community, become an MVP, and win exclusive prizes! https://bit.ly/Community_MVP
0

Nebula Tips & Tricks

FAQ
New & Release
Nebula Status & Incidents
Video Tutorials

[NEBULA] VPN between two NSG100 devices (both behind NAT)

All Replies

Categories

Nebula Tips & Tricks

Nebula Help Center