USG60 - VPN ipsec IP

Hi @ezekiel74

I am not sure if I catch you.

I understand that you configured an IPsec server for nomad users.

Obviously, the nomad/remote users are connected to the internet before they establish the vpn tunnel.
Once they connect, they receive a new ip adress provided by the "VPN" (in most of the cases via DHCP or via RADIUS).

When the nomad users is disconnected, the "VPN" address is removed.

I suppose you want to determine the public ip address of the USG60 to establish the VPN.

That kind of service is called "Dynamic DNS". 

Once your device is on the internet, it logins into a Dynamic DNS platform, so the user only needs to remember the DNS name to know the ip address of the VPN server. In most of the VPN clients, a name could be configured as a remote server.

More information about how to configure a zyxel router to use DDNS can be found on:

https://www.noip.com/support/knowledgebase/setting-ddns-zyxel-router/

I hope it helps you.

Enjoy 

Hi @ezekiel74

According to your scenario:
While the vpn is up, the showed ip address of your mobile/laptop should be 153.23.24.58.
But once the vpn. is down ... your ip address will be  81.20.139.26.

So if I understood you well, you want to configure a nomad IPSec VPN server on the USG60, be cause you want to show "always" the ip address 153.23.24.58

Am I right?

Hi @ezekiel74

I recommend to you l2tp over ipsec.
Most android & ios phone and windows pc can be configured to establish this kind of vpn without installing any new app/software.

Here it  is a link which shows how to do it:

https://support.zyxel.eu/hc/en-us/articles/360001390914-L2TP-configuration-on-a-USG-Firewall-using-the-Windows-built-in-client

I hope it helps you.

Enjoy

ezekiel74 said:

Hi @Alfonso  

so in this way I'll have my home public ip?

Best Regards
eze

Yes, i usually use my own vpn.

My mobile is configured to use my vpn server, and once is connected all flows go via the VPN, so the showed public ip address is the vpn server.

Regards 

Hi @ezekiel74

"No proposal chosen" : your combination of your encryption, hash and dh group is different on both devices.

As I do not have an iphone, I do not know ipsec iphone capabilities.
But I suppose that the following configuration should work:
Encryption: AES
Hash: SHA1
DH: 2

I hope you will get it