Zywall 310 - communication between IPSEC VPN clients

Trialog · October 2017

Hello everybody,

I try to setup communication between IPSEC VPN clients on Zywall 310. Clients can connect and ping LAN interface, but can’t ping each other.

My setup:

Zywall 310

WAN

192.168.31.135

255.255.255.0

LAN

172.16.0.1

255.255.0.0

Users are using Shrew VPN client to connect. Client’s IPs are static from subnet 172.17.0.0/16.

Policy Generation Level: required
Remote Network Resources: 172.16.0.0/16, 172.17.0.0/16

Can anybody help me to find right configuration?

Thank you.

jasailafan · October 2017

I also got the same problem when using ZyWALL IPSec VPN client.

Use mode config on both ZyWALL and ZyWALL IPSec VPN client but clients cannot ping each other.

Jeremylin · October 2017

Change the configuration as following, and check it again.

LAN1: 172.16.0.0/16

VPN Connection:

Scenario: Server role

Local Policy: 172.16.0.0/15

VPN client Address: 172.16.100.X/24

Comments