SecuExtender disconnected after 8-10 seconds

simonwong

I found some post which is about some connection issue for SecuExtender in HP laptop, but I already updated the latest Wi-Fi driver, Firewall firmware and using SecuExtender 4.0.5.0, but my new HP laptop just connect to my Zyxel firewall 8-10 seconds, the connection is gone. I found the user still login in the firewall.

In my old laptop (DELL with Windows 11), no issue.

simonwong

I uninstalled all HP related program in the laptop, but still failure

PeterUK

Does the IP the VPN gets not conflict with the LAN the HP is on?

Zyxel_Melen

Hi @simonwong,

Does the firewall show any disconnect logs? If not, what are the logs on the Secuextender?

simonwong

My dell and my new HP laptop are using same 4G network and using same account.

I attached the log in here as I try to login again today

###################################.txt

Zyxel_Melen

Hi @simonwong,

The logs show that a conflict existed. Please recheck the firewall SSL VPN configuration. The remote IP/VPN interface subnet shouldn't have a subnet conflict with the local IP/LAN interface.

simonwong

Hi Melen,

The setting which I'm using with no issue. No problem at all with different accounts and different laptops. Even I use another laptop with new installation. Just only the HP laptop contains problem =.=

Zyxel_Melen

Hi @simonwong,

As you can see on the logs, the node ip and the local ip are in the same subnet. Based on this information, we assume your setting has misconfiguration.

Normally, we will set the node IP subnet/SSL VPN assign IP pool differently from the local ip /Network extension local IP. If we set them as the same subnet, the traffic will have an issue. Here's an example of the correct configuration:

Could you help check these settings and adjust theSSL VPN assign IP pool?

simonwong

My teammates want to access LAN network (192.168.1.X)from outside with using SSLVPN, now they are assigned 192.168.100.X from the firewall.

So I need change the setting in the SSLVPN IP POOL or Network Extension Local IP?

Zyxel_Melen

Hi @simonwong,

You may change the Network Extension Local IP.

simonwong

I found you click 'Force all client traffic to enter SSL VPN tunnel' but I just let my client go to LAN network only if access the LAN resource, if they access internet, just use their router gateway.