FLEX 200, L2TP suddenly stopped working

We have been running L2TP with MS-CHAP v2 for some time.
But its suddenly stopped working, and the logs says 'No proposal chosen'

When going all settings, its looks fine

FW is: 5.32(ABUI.0)



maybe @Zyxel_Emily have any idea

Accepted Solution

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 885  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
    Answer ✓
    Hi @syraarpe
    After remote checked , L2TP works again after disable X-Auth.
    Please kindly check the issue is resolved. 
    Thank you
    Kevin

All Replies

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 885  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
    Hi @syraarpe,
    The proposal from end client may change after OS update. 
    Please kindly check detail log messages to find suite proposal and set the match proposal on firewall .

    You can refer the FAQ 
    How to check IKEv2 settings when it is not working
    Thank you
    Kevin

  • I have allready tryed from 3 different OS. Win11, win10 and srv2012.
    And win10, was an older version, that havent been updated in a while.
    All doing the same error.

    I have also added a few more proposel, but its still fails, and never says mismatch. Just no chosen.

    However i can see the firmware was installed 30 days ago on FW. So maybe there is a bug?
  • Zyxel_Kevin
    Zyxel_Kevin Posts: 885  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
    Hi @syraarpe
    Please kindly share your config by private message. 
    I will do the check . Thank you
    Kevin
  • Zyxel_Kevin
    Zyxel_Kevin Posts: 885  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
    Answer ✓
    Hi @syraarpe
    After remote checked , L2TP works again after disable X-Auth.
    Please kindly check the issue is resolved. 
    Thank you
    Kevin

Security Highlight