How to Set Up Nebula site-to-site VPN on the USG FLEX H and USG Lite 60AX?

Zyxel_Judy

This example shows how to use the USG Lite 60AX to establish IPSec Site to Site VPN tunnel with USG FLEX H series models using the Nebula Control Center. Once the Site-to-Site VPN tunnel is established, LAN hosts can communicate with each other through the VPN tunnel seamlessly.

Requirements
Both the USG FLEX H and USG LITE 60AX must be managed and online in separate sites under the same Nebula organization.

Set Up the Site-to-Site VPN on the USG FLEX H

• On Nebula Control Center, navigate to Side-wide > Configure > Firewall > Site-to-Site VPN
• Configure the Primary interface, and Secondary interface (backup interface if yes),
• On the local networks, enabling the interface will require routing through the VPN.
• Enable the Nebula VPN and choose the Site-to-Site VPN topology.

Set Up the Site-to-Site VPNs on the USG Lite 60AX

• On Nebula Control Center, navigate to Side-wide > Configure > Security Router > Site-to-Site VPN
• On the local networks, enabling the interface will require routing through the VPN.
• Enable the Nebula VPN and choose the Site-to-Site VPN topology.

Important: For devices behind NAT, ensure you configure the NAT traversal IP addresses in Nebula for proper connectivity.

Verify the VPN Connection

• Navigate to Side-wide > Firewall > VPN connections to check the site-to-site VPN connection was connected successfully

• Navigate to Side-wide > Security Router > VPN connections to check the site-to-site VPN connection was connected successfully

• Navigate to the Web-GUI path VPN Status > IPsec VPN > Site to Site VPN of the USG Flex H series model to check the Nebula VPN connection was connected successfully.