USG FLEX 200H: Remote Access VPN (IKEv2) Split Tunnel limited to a single CIDR field

MyForumUser

Hi everyone,

We are currently configuring a Remote Access VPN (IKEv2) on a USG FLEX 200H. While setting up Split Tunneling, we’ve noticed a major limitation compared to the Site-to-Site (S2S) configuration.

In Site-to-Site VPN, the H-series easily allows the selection of multiple subnets. However, in the Remote Access VPN setup, the GUI only provides a single input field that strictly requires a single CIDR notation.

The Issue:
We need our remote clients to access two non-contiguous subnets, for example:

10.10.15.0/24

192.168.95.0/24

The GUI does not seem to accept Address Groups, Objects, or multiple entries (comma-separated). Since these IP ranges are so far apart, Supernetting / CIDR summarization is not a viable solution for us.

My questions:

Why is the Remote Access configuration restricted to a single CIDR field when the S2S implementation allows multiple networks?

Is there a way (perhaps via CLI) to add multiple Traffic Selectors or Local Policies to a single Remote Access Gateway?

Are there plans to allow Address Groups in this field in an upcoming firmware update, to bring it in line with the Site-to-Site capabilities?

Any help or workarounds to get multiple routes pushed to the IKEv2 clients would be greatly appreciated.

Best regards

Zyxel_Judy

Hi @MyForumUser ,

Currently, a solution is available for the Windows native VPN client only. Please refer to the article below for configuration guidance.

https://community.zyxel.com/en/discussion/30664/does-the-usg-flex-h-model-support-multiple-split-tunnels-for-the-windows-native-vpn-client

Regarding support for IKEv2 remote access VPN split tunneling with multiple subnets, we will evaluate this carefully. If the feature is released, it will be announced in the release.

Zyxel_Judy

Hi @MyForumUser ,

You can view and contribute to this idea in the following section:

[H firewall] IKEv2 remote access VPN split tunneling with multiple subnets — Zyxel Community

MyForumUser

Hi @Zyxel_Judy,

thank you.

This would help us a lot.

Hopping for the best.

Kind regards

Dirk