Flex 100H DNS over VPN Tunnel

PeterUK

What side has 10.20.30.2?

P4Colin

https://community.zyxel.com/en/discussion/comment/74473#Comment_74473

Remote site (router we setup in our office for testing)

LAN - 192.168.2.0/24, VTI IP - 10.20.30.2/30

PeterUK

is it the FLEX 200 or FLEX 100H?

P4Colin

https://community.zyxel.com/en/discussion/comment/74475#Comment_74475

Disregard the prior comments on models, in this round of testing we are connecting a test unit in our office (200H) to the customer's site (200).

PeterUK

I ask because here shows ping 10.10.1.10 from 10.22.30.1 and is from a FLEX H

Flex 100H DNS over VPN Tunnel — Zyxel Community

P4Colin

https://community.zyxel.com/en/discussion/comment/74477#Comment_74477

Apologize for the confusion, we setup a new test from scratch to ensure there was not any misconfigurations with the existing equipment.

Here is this screenshot from the new Flex 200H we have setup in our office for testing where we are experiencing the same issues:

PeterUK

so I take it FLEX 200 non H has 10.22.30.1 for it VTI where the DNS server 10.10.1.10 is?

P4Colin

https://community.zyxel.com/en/discussion/comment/74479#Comment_74479

Correct, but for this new testing scenario that we setup the 200 (non H) is using 10.20.30.1/30 so it is in the same subnet as the 10.20.30.2/30 that the 200H is.

Just want to reiterate again that we are not having issues with traffic initiated from the computers traversing the VPN, only traffic initiated from the router.

PeterUK

So on the FLEX200 non H the DNS server on the LAN is a /24? and if DNS server is setup with a static IP its subnet is /24?

P4Colin

https://community.zyxel.com/en/discussion/comment/74481#Comment_74481

Correct. Client side LAN is 10.10.1.1/24, with a DNS server at 10.10.1.10/24. Remote side LAN is 192.168.2.1/24. I have a computer at 192.168.2.33 which can ping to the server at 10.10.1.10 (and the server can ping the computer).