Site-to-Site VPN: Private Subnet or real IP parameter in Nebula section

Options
GiuseppeR
GiuseppeR Posts: 431  Master Member
Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

Hello everyone,

if you look into Zyxel documentation you can find this example:

https://support.zyxel.eu/hc/it/articles/15366638605714-SCR50AXE-Router-sicuro-gestito-dal-cloud-Configurazione-in-Nebula-e-Guida-introduttiva#h_01HG8FKQCTA7RRXNMTXDQWFFVV

to be exact you see this section:

immagine.png

There it is told to use 192.168.10.0/24 instead of a specific IP like 192.168.10.1/24 but in the image attached it is used 192.168.10.1/24 because Nebula asks for a specific IP to ping:

immagine.png

You cannot ping 192.168.10.0 but you can ping 192.168.10.1 (if this is the gateway of that subnet, of course).

All Replies

  • Zyxel_Tina
    Zyxel_Tina Posts: 82  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 5 Answers First Comment

    Hi @GiuseppeR,

    We sincerely appreciate you bringing this important detail to our attention. We will take action to revise and correct the official documentation based on your feedback.

    Thanks again for helping us improve.

    Zyxel Tina

  • GiuseppeR
    GiuseppeR Posts: 431  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hello @Zyxel_Tina

    thanks for your feedback, have a nice day 😁

  • Zyxel_Tina
    Zyxel_Tina Posts: 82  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 5 Answers First Comment

    Hi @GiuseppeR,

    We've done the revision. Thank you!

    Zyxel Tina

  • GiuseppeR
    GiuseppeR Posts: 431  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hello @Zyxel_Tina

    immagine.png

    The Italian translation of the highligh sentence is:

    Private Subnet - The LAN subnet of the other side, which you want to reach from your side (use the subnet, not the gateway address, e.g. 192.168.10.1/24, not 192.168.10.0/24).

    The mistake is still there.

    The subnet is 192.168.10.0/24

    The gateway is 192.168.10.1/24 (honestly speaking the gateway could be also 192.168.10.254/24 or other IPs, but following your scheme is NOT 192.168.10.0/24)

    The x.x.x.0/24 value is referred to the general subnet.

    So a correct sentence could be:

    "Private Subnet - Consider to use an IP that you could always ping inside the LAN subnet of the other side, which you want to reach from your side (e.g. the gateway address, not the subnet itself, e.g. 192.168.10.1/24, not 192.168.10.0/24)"

    Anyway it is not a specific error for Italian documentation, it is included also in other languages like ENG:

    immagine.png

Nebula Tips & Tricks