USG60W (V4.32) VPN Client to Site problem IKEv2 - tunnel established but no traffic

Domel
Domel Posts: 6  Freshman Member
First Comment
edited April 2021 in Security

Hi everyone.

I'm trying to configure VPN connection (VPN Client to Site IKEv2 and Windows 10 VPN client) at my office, for remote users, but i have a problem. Tunnel is up, but there is no outbound traffic from the Zywall. Remote PC received IP address and is sending packets to Zywall, but no response. Any advice?

Policy Control:


Routing:



All Replies

  • Domel
    Domel Posts: 6  Freshman Member
    First Comment
    I used this tutorial
    http://onesecurity.zyxel.com/img/uploads/Next-Gen_IKEv2_VPN_Server_Role_CR.pdf
  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,377  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary

    Hi @Domel

    As your description, there is no outbound traffic from ZyWALL.

    The root cause could be on your local policy of this VPN connection(Phase 2).

    Did you set local policy as 0.0.0.0~255.255.255.255 ? (You can reference to document page 7)


  • Domel
    Domel Posts: 6  Freshman Member
    First Comment
    Yup. Range is 0.0.0.0-255.255.255.255.
  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,377  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary
    Hi @Domel
    I will send you private message for check this issue more detail.
  • Domel
    Domel Posts: 6  Freshman Member
    First Comment
    Problem solved. By default, this option was not checked in the connection settings.



    Zyxel_Stanley thanks for support and... patience :)
  • Marcos
    Marcos Posts: 1  Freshman Member
    a mi ocurre lo mismo, pero no encuentro la opción que comentas Domel
  • Zyxel_Chris_H
    Zyxel_Chris_H Posts: 28  Freshman Member
    First Answer First Comment Friend Collector
    edited December 2018
    Hi @Marcos

    Please describe the issue in English on this forum.If you'd like to ask question in other language, please contact your local Zyxel technical support.Thanks for your understanding.

    If you want to see the option “Use default gateway on remote network”, you have to check on VPN Interface.


    You can find this option by following steps:

    1.      Go to the “Network and Sharing Center”

    2.      Click on “Change Adapter Settings”

    3.      Enter into your VPN interface and Select “Networking” in Upper Bar

    4.      Click on “Properties” in Internet Protocol Version4(TCP/IPv4)

    5.      Click “Advanced” Button and then you can find the option “Use default gateway on remote network”.


  • Anthoshell
    Anthoshell Posts: 13  Freshman Member
    First Comment Friend Collector Second Anniversary

    Hello :)

    I'm facing the same issue, client connected but no access to internal network.

    I checked "Use default network..." but now i don't internet and still not access to internal network ...

    Can someone help ?

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）