Error when converting a wizard made VPN to custom made VPN

Options
GiuseppeR
GiuseppeR Posts: 417  Master Member
Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

Hello everyone, I set a VPN via Wizard:

immagine.png

But I wanted to edit its authentication method:

immagine.png

and I tried to convert it to "Custom" but I get this error:

immagine.png

How can I solve it?

All Replies

  • PeterUK
    PeterUK Posts: 3,861  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited June 30

    I just use custom from the start

    But I do see your point it seems the wizard is not perfect  

  • GiuseppeR
    GiuseppeR Posts: 417  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hi @PeterUK

    when you set a VPN manually and you have the origin behind a NAT, how do you set this area:

    immagine.png

    Meaning of "Origin IP" and "Mapped IP"?

    Idea is the ISP router has 1.2.3.4 as public IP, its network is 192.168.1.1/24

    Zyxel firewall is in a DMZ and it is static at 192.168.1.100

    So how I can configure those 2 forms?

  • PeterUK
    PeterUK Posts: 3,861  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    You likely do not need that setting if your doing the following

    Full VPN tunnel from FlexH 1.32 FW to Nebula Org firewall — Zyxel Community

  • GiuseppeR
    GiuseppeR Posts: 417  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    I'm trying to set that VPN from uOS interface, so I tried to understand how uOS thinks.

    I'm looking how to set the gateway and IP that has the FlexH to replicate this condition:

    immagine.png

    because I have the router in the middle and I cannot manipulate it.

    So I have to tell the Local Site to go to Remote Site without considering it, like I can do that via Nebula using NAT traversal:

    immagine.png