Site to site IPSec VPN: VLAN5 <-> LAN2 interface

Options

Niels2021

Niels2021 Posts: 7

Freshman Member

Zyxel Certified Network Engineer Level 2 - WLAN

Zyxel Certified Network Engineer Level 2 - Switch

Zyxel Certified Network Engineer Level 2 - Nebula

Zyxel Certified Network Engineer Level 1 - Nebula

January 2022 in Security

I’m trying to set up a tunnel between a VLAN on 1 site and a regular LAN interface on the other site. The tunnel seems to work fine, but I cannot make any connection to the devices.

I have tried site to site and vti, both seem to connect, but cannot ping. Tunnel interface between 2 LAN interfaces is no problem, but I need VLAN <-> LAN2.

Image: https://us.v-cdn.net/6029482/uploads/editor/lt/cea9mc6q703r.png

VPN_TEL_LOCAL Left: Subnet: 192.168.5.0

VPN_TEL_REMOTE Left: Subnet: 192.168.10.0

VPN_TEL_LOCAL Right: Subnet: 192.168.10.0

VPN_TEL_REMOTE Right: Subnet 192.168.5.0

Still no response on both sides. Any help?

0

All Replies

PeterUK Posts: 4,411 Guru Member

January 2022

You want site to site with at least one end nailed-up the status will show the tunnel is up

0
Niels2021 Posts: 7 Freshman Member

January 2022

PeterUK said:

You want site to site with at least one end nailed-up the status will show the tunnel is up

They are both nailed up, status is also connected, so that's not the problem. I think it's the routing that I cannot get configured well

0
PeterUK Posts: 4,411 Guru Member

January 2022

If you have setup the Local and remote policy right with a zone for the site to site then you might need a routing rule.

Incoming Interface

member LAN/ge

destination the remote subnet

next hop

type VPN Tunnel

tunnel your zone for the site to site

Then a firewall for LAN to zone site to site

0
WJS Posts: 156 Master Member

January 2022 edited January 2022

What's about your Security Policy ? Have you allowed the traffic ?
Also,Please check there is no "Source Network Address Translation" applied.

0

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）