VPN with router

Options
federicofederigi
federicofederigi Posts: 5
First Comment
edited April 2023 in Security

i'm trying with usg40

wan 192.168.8.2 lan 192.168.9.1 Public ip of router 2.42.21.. .. router 192.168.8.1

if connect my linux pc on 192.168.8.?? VPN ike2 on 192.168.8.2 con preshared-key work regularly.

if i connect the same vpn but on 2.42.21. . .. after NAT of ports 500 e 4500 udp on router

connect temporarly and don't work

VPNGateway.jpg
VPNGateway1.jpg
VPNConnectionPG1.jpg
VPNConnectionPG2.jpg
VPNrouterNAT.jpg
VPNlog.jpg

All Replies

  • federicofederigi
    federicofederigi Posts: 5
    First Comment
    Options

    other vpn with same USG same router but other client VPN on windows work OK

  • Fred_77
    Fred_77 Posts: 115  Ally Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi (ciao) @federicofederigi

    afaik also ports 50 an 51 should be natted from your vodafone station to usg.

    P.S. suppongo tu abbia buone ragioni per non dirottare tutto il traffico all'usg e gestire le policy di sicurezza su quest'ultimo…

    Fred

  • federicofederigi
    federicofederigi Posts: 5
    First Comment
    Options

    Ho girato tcp 50 e tcp 51. Ho girato tutte le porte sul USG40 e messo in dmz e disabilitato policy.

    ma fa la stessa cosa, sembra connesso ma non funziona, e dopo qualche minuto si scollega

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,298  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @federicofederigi,
    If the USG40 is placed behind the router, you need to create both NAT and firewall rules to allow UDP port 500 and 4500 on that router. On USG40, set 0.0.0.0/0 in the Local Policy of VPN Connection.

  • federicofederigi
    federicofederigi Posts: 5
    First Comment
    Options
    conn.jpg

    do you mean this local policy? (named LINUX_ALL)

    with this i have the same problem

  • federicofederigi
    federicofederigi Posts: 5
    First Comment
    Options
    log.jpg

    this is new log. . . i think another step. . . but connection lose immediately . .

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）