V1.38 - IPsec VPN split tunneling not set correctly

Options
Dylan96
Dylan96 Posts: 44 image  Freshman Member
Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security First Comment Friend Collector
in USG FLEX H Series

After updating to v1.38, the IPsec VPN auto‑configuration script does not correctly set split tunneling.
Based on a quick review of the script, the "true" variable does not appear to be set correctly in this section:

image.png

Accepted Solution

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,420 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @Dylan96 ,

    We have resolved the issue on Nebula. Please re-download the file and let us know if everything looks good on your end.

    Zyxel_Judy

All Replies

  • GiuseppeR
    GiuseppeR Posts: 721 image  Guru Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula 5 Answers First Comment
    edited April 13

    I have some VPN Site-to-Site and also some Remote Access with 1.37P1

    With 1.38 do you have issues with VPN Site-to-Site?

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,420 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @Dylan96 ,

    The attached result was obtained by downloading the VPN Configuration Script from a USG FLEX 200H running firmware version 1.38, and the script displays the correct information.

    image.png

    Could you please confirm whether your device has been successfully updated to version 1.38? The issue you reported appears to be related to version 1.37P1.

    Additionally, you may try using a different browser to log in to the firewall and download the script.

    If the issue persists on version 1.38 and across multiple browsers, please provide your Nebula organization and site details, and enable Zyxel Support access so we can investigate further.

    Zyxel_Judy

  • Dylan96
    Dylan96 Posts: 44 image  Freshman Member
    Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security First Comment Friend Collector

    @Zyxel_Judy It seems that the issue only occurs when I download the script from Nebula, from the section Site-wide > Configure Firewall > Remote Access VPN

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,420 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @Dylan96 ,

    Thank you for letting us know. We have confirmed the issue and are currently investigating. We will keep you informed as soon as there are any updates.

    Zyxel_Judy

  • MrSlowMotion
    MrSlowMotion Posts: 2 image  Freshman Member
    First Comment

    I can confirm, we have the same Problem with a USG Flex 700H. Even when we download the Script directly from the WebGUI of the Firewall. Adding the $ in the batch files solves the Problem. Thanks Dylan96 for your research. Saved me a lot of time!

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,420 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @Dylan96 ,

    We have resolved the issue on Nebula. Please re-download the file and let us know if everything looks good on your end.

    Zyxel_Judy

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,420 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @MrSlowMotion ,

    Even when we download the Script directly from the WebGUI of the Firewall. 

    We believe your USG Flex 700H is running firmware version 1.37 or earlier. The issue with scripts directly from the web GUI has been resolved in firmware version 1.38.

    Zyxel_Judy

  • Dylan96
    Dylan96 Posts: 44 image  Freshman Member
    Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security First Comment Friend Collector
    https://community.zyxel.com/en/discussion/comment/84641#Comment_84641

    I confirm that the script is now generating correctly. Thank you!

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）