VPN between ZyWall 110 and USG 20 is CONNECTED but can't ping

Hello
I made an IPSEC VPN between a USG110 and USG20, the tunnel connects but the traffic does not pass, if I ping from the firewall console USG20> UG110 I do not receive the same response from USG20> UG110. I have also disabled policy controllers. The strange thing is that I did the configuration months ago and everything was working regularly suddenly it doesn't work anymore. What can I do thanks for the support

All Replies

  • PeterUK
    PeterUK Posts: 3,459  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    So its a site to site VPN?

    Are the local and remote policy correct?

    You may need a routing rule for the destination to go down the next hop tunnel


  • MJStar
    MJStar Posts: 37  Freshman Member
    First Answer First Comment Friend Collector Third Anniversary
    While you ping USG20 to USG110 site and no response from the peer site, are there any logs can be seen on log page(Monitor ->Log)?  Maybe it's a clue.
  • Type your don't just log in there
  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,247  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Can you provide those two sites' device config files to us via private message?
    We would like to build a test in our LAB environment to reproduce it.


    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

Security Highlight