VPN to Flex100H is driving me crazy

Zyxel_Kay

Hi @amateur_netops

Please try adjusting the LAN interface MTU size to 1300 on both firewalls to see if it helps with your issue.

If the issue persists, could you capture packets on the server end for both the USG FLEX 100H and the USG FLEX 200H traffic?

amateur_netops

I ended up rebuilding the 100H after a factory reset - made all VPNS IKE2 now - still didn't work. Set MTU to 1300 - now works.

Thank you!

Zyxel_Kay

Hi @amateur_netops

I'm glad to hear it's working! The root cause may be related to packet fragmentation. VPNs encapsulate data into larger packets, which increases their size. When the MTU is set too high, packets might exceed the size supported by network devices or along the internet path, causing fragmentation or packet drops.

By adjusting the MTU, you've helped the packets fit within network limits, reducing fragmentation and allowing VPN traffic to flow more smoothly.