VPN BETWEEN ZYXEL ATP200 AND FRITZBOX! 7590

2

All Replies

  • mMontana
    mMontana Posts: 1,389  Guru Member
    50 Answers 1000 Comments Friend Collector Fifth Anniversary
    IKEv2. That's "normal".
    Create a new IKEv1 Gateway, key group could be none.

    Create new gateway, associate the gateway to the connection, then remove the old.
  • Kepir
    Kepir Posts: 16  Freshman Member
    First Comment Friend Collector First Anniversary
    IKEv1 and still same Key Group without „none“

  • mMontana
    mMontana Posts: 1,389  Guru Member
    50 Answers 1000 Comments Friend Collector Fifth Anniversary
    edited July 2022
    You're correct and I'm wrong... I double checked on 4.x device few minutes ago.
    According to this post
    https://community.zyxel.com/en/discussion/comment/38965/#Comment_38965
    maybe there's a different way, for allowing connection between Fritz device and the ATP, configuring the connection without PFS/Keygroup and the gateway with the key group.


  • CHS
    CHS Posts: 181  Master Member
    5 Answers First Comment Friend Collector Sixth Anniversary
    You may have a try key group setting on ATP200:
    Phase1(VPN Gateway): DH2
    Phase2(VPN Connection): none

    If still doesn't help, you can share VPN connection fail log entries.
  • Kepir
    Kepir Posts: 16  Freshman Member
    First Comment Friend Collector First Anniversary
    No Logs at USG310 !

    The only log is at Fritzbox :

    IKE-Error 0x2026

    "no proposal chosen"

  • Kepir
    Kepir Posts: 16  Freshman Member
    First Comment Friend Collector First Anniversary
    Is there anyone really got a connection between those devices ? 
    Or do we talk about things that „normally has to work“ but nobody tested it in real conditions.
    I can connect from my devices ( Mac,IPhone, IPad … )  to my Fritzbox (IPSec VPN-Server) or to my USG310 (IPSec/L2TP VPN-Server).
    But still have problems Fritz tu USG !!!

  • zyman2008
    zyman2008 Posts: 223  Master Member
    25 Answers First Comment Friend Collector Seventh Anniversary
    Kepir said:
    No Logs at USG310 !

    The only log is at Fritzbox :

    IKE-Error 0x2026

    "no proposal chosen"

    @Kepir
    The log on Fritzbox said "no proposal chosen" means no matched rules on USG.
    So that cloud be settings mismatch of IPSec rules on USG.
    With IKE log of your USG can help to understand what's mismatch settings between both.
    Make sure the IKE log is enable on your USG. And then post the logs you get.


  • CHS
    CHS Posts: 181  Master Member
    5 Answers First Comment Friend Collector Sixth Anniversary
    @Kepir
    Your VPN connection scenario is different as previous one which setting is "client to site VPN"...
    Here is FRITZBOX site to site VPN configuration guide:
    https://en.avm.de/service/vpn/tips-tricks/connecting-the-fritzbox-with-a-companys-vpn/

    In IKEv1 setting on USG could be:


    #6 The VPN ID on USG doesn't support space in setting, so you could enter FRITZBOX WAN IP address as VPN-ID on both of sites.

    If your VPN tunnel still with the problem, you have to take screenshot on USG/FRITZBOX all IKE log entries....because there are too many reason will case no proposal chosen!!!
  • Kepir
    Kepir Posts: 16  Freshman Member
    First Comment Friend Collector First Anniversary
    Thank you @zyman2008 @CHS,

    yesterday i found an other solution . i created vpn.cfg file and i have a stable vpn connection.
    But i am not able to ping each other.
    Here is my config .







  • Kepir
    Kepir Posts: 16  Freshman Member
    First Comment Friend Collector First Anniversary
    Here some additional screenshots ..

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）