Trouble Configuring Client-To-Site VPN with IKEv2 and USG40

rdvasil1

I'm trying to setup a Client-To-Site VPN with a USG40 Host using IKEv2 and a Microsoft VPN client. I've followed the instructions in the guide - [ZyWALL/USG] How to set up a Client-to-Site VPN (Configuration
Payload/DHCP) connection using IKEv2

I've successfully connected from the remote client to the Host site and the client receives an IP address from the pool. However, I cannot access any resources on the host network, cannot ping the host router or any IP. The Windows client shows connected and packets sent but none received. The USG40 Monitor shows a VPN connection and packets received but none sent.

I'm assuming it's a NAT or Policy problem, but not sure where to look

Zyxel_Melen

Hi @rdvasil1,

May I know if your security policy allows the VPN to access your LAN interface?

PeterUK

Do both site have different LAN subnets you are trying to access?

You maybe need a routing rule at the top of the list like

incoming LAN1
destination subnet of the other site
next hop VPN tunnel

Then a policy rule from LAN1 to VPN zone

the other side might also need a routing rule