Several VPN gateways USG FLEX 500

RiKa
RiKa Posts: 8  Freshman Member
First Comment Third Anniversary
in Security

A quick question about the USG FLEX 500. Is it possible to set up several VPN gateways in parallel?
I want to implement the following scenario:

VPN GW1 is set up and running. Users can access the internal LAN via L2TP/IPSEC from their devices.

VPN GW2 is new and should now connect our new office directly to the site-to-site VPN of the head office. A: USG60W > USG FLEX 500

Thanks for an answer

All Replies

  • PeterUK
    PeterUK Posts: 3,461  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Yes that should be possible.

  • mMontana
    mMontana Posts: 1,389  Guru Member
    50 Answers 1000 Comments Friend Collector Fifth Anniversary

    I'd love to know how it should be, if you can @PeterUK

  • PeterUK
    PeterUK Posts: 3,461  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited August 2023
    https://community.zyxel.com/en/discussion/comment/56239#Comment_56239

    They have L2TP/IPSEC working for remote devices so all they need is the site to site.

    Here is a run through

    VPN gateway

    IKEv2

    interface WAN1

    peer gateway

    You need to know which end or both to be nailed up Static Address (can use domain name) to connect to the other end or Dynamic Address for the other end to connect to this end to be Site-to-site with Dynamic Peer

    uncheck Enable Two-factor Authentication

    VPN connection

    Nailed-Up on one of the ends

    Site-to-site with Dynamic Peer or Site-to-site depending how you setup VPN gateway

    set your local/remote policy

    routing rules add if needed

  • mMontana
    mMontana Posts: 1,389  Guru Member
    50 Answers 1000 Comments Friend Collector Fifth Anniversary

    Thanks for sharing.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）