USG60 L2TP over IPsec VPN working fine, but can´t connet to a vnc server

Hakandenende

Hi, USG60 configured with L2TP over IPsec vpn is working fine. On the inside there´s 5 vnc servers. It´s possible to connet to one of them (a usal pc with Tigth VNC) . The other 4 are milking robots (!) with internal vnc servers. Sitting on the real inside its no problem conneting but if the connetions are made throu VPN the vnc servers don´t respond. I guess the internal config of the vnc servers are set to only respond to connections from the same subnet and the vnc servers are looked so I can´t change this. IP of the servers are 192.168.168.x and the tunnel IP 192.168.100.100 -110.

Is there a way to come around this?

Zyxel_Jerry

Hi @Hakandenende

If the VNC server only can notify the same subnet,

Add policy route and setup SNAT.

Below is the example of Policy Route settings

Go to Configuration > Network > Routing > Policy Route > Add 

Incoming : tunnel

Member : L2TP tunnel

Source address: 192.168.100.100-110 

Destination address : 192.168.168.X  

SNAT : 192.168.168.100-110