USG felx 200H/100H Next-hop vpn limitation

Jysk_CTS

Hello

I have a main site that requires traffic from an off-site location to route through a VPN to reach the main site. Unfortunately, configuring a next-hop VPN is not currently supported on the USG FLEX 200H and 100H devices.

Is there an effective workaround for this limitation, or will I need to wait for this feature to be added in a future firmware update?

Zyxel_Kay

Hi @Jysk_CTS

Currently, the next-hop VPN functionality is supported only for Route-based VPN (VTI). Unfortunately, Policy-based VPN does not support this feature at the moment.

To work around this limitation, you can set up a Site-to-Site VPN using Route-based VPN (VTI). Once configured, the required routes will automatically appear in the Static Route interface, allowing traffic to flow through the VPN as intended.

For the instructions on setting up a Route-based Site-to-Site VPN, you take this post as a reference:

https://community.zyxel.com/en/discussion/26423/how-to-configure-site-to-site-vpn-between-zld-and-uos-using-route-based

Zyxel_Kay

Hi @Jysk_CTS

Currently, the next-hop VPN functionality is supported only for Route-based VPN (VTI). Unfortunately, Policy-based VPN does not support this feature at the moment.

To work around this limitation, you can set up a Site-to-Site VPN using Route-based VPN (VTI). Once configured, the required routes will automatically appear in the Static Route interface, allowing traffic to flow through the VPN as intended.

For the instructions on setting up a Route-based Site-to-Site VPN, you take this post as a reference:

https://community.zyxel.com/en/discussion/26423/how-to-configure-site-to-site-vpn-between-zld-and-uos-using-route-based