Can't establish VPN-connection Win10<->USG60W
Options
Hi,
I recently installed a USG60W and now fail to setup VPN correctly.
My goal is to allow tunneling into the LAN via VPN using Windows 10's built-in VPN client.
The firewall is behind the modem given to me by my ISP:
Internet
185.50.xx.yy (WAN) - A1 WLAN Box ADB VV2220 - 10.0.0.138 (DMZ)
10.0.0.2 (WAN1) - ZyXEL USG60W - 192.168.0.20 (LAN1)
When trying to connect, Windows says:
![Image: https://us.v-cdn.net/6029482/uploads/editor/yy/mw0pllzuwv7e.png](https://us.v-cdn.net/6029482/uploads/editor/yy/mw0pllzuwv7e.png)
While the firewall's log says:
![Image: https://us.v-cdn.net/6029482/uploads/editor/2c/977kpcvc0kxp.png](https://us.v-cdn.net/6029482/uploads/editor/2c/977kpcvc0kxp.png)
It seems to me, it's repeatedly rekeying (whatever that means):
![Image: https://us.v-cdn.net/6029482/uploads/editor/bi/t7lmb3aax3e7.png](https://us.v-cdn.net/6029482/uploads/editor/bi/t7lmb3aax3e7.png)
VPN connection and gateway were created by the quick setup wizard and are configured as follows:
![Image: https://us.v-cdn.net/6029482/uploads/editor/yf/tehd8dl170f2.png](https://us.v-cdn.net/6029482/uploads/editor/yf/tehd8dl170f2.png)
![Image: https://us.v-cdn.net/6029482/uploads/editor/94/dqs1owr3d6cy.png](https://us.v-cdn.net/6029482/uploads/editor/94/dqs1owr3d6cy.png)
Does anyone know, what the problem might be or how to solve it?
I appreciate any kind of help!
I recently installed a USG60W and now fail to setup VPN correctly.
My goal is to allow tunneling into the LAN via VPN using Windows 10's built-in VPN client.
The firewall is behind the modem given to me by my ISP:
Internet
185.50.xx.yy (WAN) - A1 WLAN Box ADB VV2220 - 10.0.0.138 (DMZ)
10.0.0.2 (WAN1) - ZyXEL USG60W - 192.168.0.20 (LAN1)
When trying to connect, Windows says:
![Image: https://us.v-cdn.net/6029482/uploads/editor/yy/mw0pllzuwv7e.png](https://us.v-cdn.net/6029482/uploads/editor/yy/mw0pllzuwv7e.png)
While the firewall's log says:
![Image: https://us.v-cdn.net/6029482/uploads/editor/2c/977kpcvc0kxp.png](https://us.v-cdn.net/6029482/uploads/editor/2c/977kpcvc0kxp.png)
It seems to me, it's repeatedly rekeying (whatever that means):
![Image: https://us.v-cdn.net/6029482/uploads/editor/bi/t7lmb3aax3e7.png](https://us.v-cdn.net/6029482/uploads/editor/bi/t7lmb3aax3e7.png)
VPN connection and gateway were created by the quick setup wizard and are configured as follows:
![Image: https://us.v-cdn.net/6029482/uploads/editor/yf/tehd8dl170f2.png](https://us.v-cdn.net/6029482/uploads/editor/yf/tehd8dl170f2.png)
![Image: https://us.v-cdn.net/6029482/uploads/editor/94/dqs1owr3d6cy.png](https://us.v-cdn.net/6029482/uploads/editor/94/dqs1owr3d6cy.png)
Does anyone know, what the problem might be or how to solve it?
I appreciate any kind of help!
0
Comments
-
Hello Poberl,
For VPN connect with win10<->USG,
To establishing the L2TP connection , remember to enable the “IKE service”. Please refer to attached document as your reference.
Charlie
0 -
Hello Charlie,
thank you for your response.
The IKE service was already running, so that doesn't seem to be the problem.
0 -
For the case, USG is behind NAT device.
Please refer this KB to configure the NAT mapping on your modem. (UDP:500 and 4500)
https://kb.zyxel.com/KB/searchArticle!viewDetail.action?articleOid=015090&lang=EN
Also, you need to add registry key on your Windows client
https://support.microsoft.com/en-us/help/926179/how-to-configure-an-l2tp-ipsec-server-behind-a-nat-t-device-in-windows
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent]
"AssumeUDPEncapsulationContextOnSendRule"=dword:00000002
0 -
Hi zyman,
I now am able to connect via VPN.
I think the registry entry did the trick, though I updated the firmware too.
Anyway thanks for your help!
0
Categories
- All Categories
- 413 Beta Program
- 2.3K Nebula
- 192 Nebula Ideas
- 87 Nebula Status and Incidents
- 5.3K Security
- 142 USG FLEX H Series
- 253 Security Ideas
- 1.3K Switch
- 75 Switch Ideas
- 993 Wireless
- 51 Wireless Ideas
- 6.1K Consumer Product
- 231 Service & License
- 362 News and Release
- 74 Security Advisories
- 23 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 101 About Community
- 67 Security Highlight