VPN to Flex100H is driving me crazy

Options
2»

All Replies

  • Zyxel_Kay
    Zyxel_Kay Posts: 1,279 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - WLAN Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security
    Answer ✓

    Hi @amateur_netops

    Please try adjusting the LAN interface MTU size to 1300 on both firewalls to see if it helps with your issue.

    If the issue persists, could you capture packets on the server end for both the USG FLEX 100H and the USG FLEX 200H traffic?

    Kay

  • amateur_netops
    amateur_netops Posts: 16 image  Freshman Member
    First Comment Friend Collector First Anniversary
    Answer ✓

    I ended up rebuilding the 100H after a factory reset - made all VPNS IKE2 now - still didn't work. Set MTU to 1300 - now works.

    Thank you!

  • Zyxel_Kay
    Zyxel_Kay Posts: 1,279 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - WLAN Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security
    Answer ✓

    Hi @amateur_netops

    I'm glad to hear it's working! The root cause may be related to packet fragmentation. VPNs encapsulate data into larger packets, which increases their size. When the MTU is set too high, packets might exceed the size supported by network devices or along the internet path, causing fragmentation or packet drops.

    By adjusting the MTU, you've helped the packets fit within network limits, reducing fragmentation and allowing VPN traffic to flow more smoothly.

    Kay

  • amateur_netops
    amateur_netops Posts: 16 image  Freshman Member
    First Comment Friend Collector First Anniversary
    https://community.zyxel.com/en/discussion/comment/71677#Comment_71677

    Well, the problem came back with the latest firmware release

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）