Packet capture: not possible for VPN interfaces

Options
Rösti
Rösti Posts: 15 image  Freshman Member
First Comment Friend Collector
edited July 7 in USG FLEX H Series

Hello,

I have SSL VPN setup and is up and running. In the Diagnostics - Packet Capture I can't select corresponding interface. Why?!

Accepted Solution

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,894 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Answer ✓
    Options

    Hi @Rösti

    Currently method to capture the SSL VPN traffic is to use command "cmd traffic-capture tun0".

    If you need the Diagnostics - Packet Capture to support SSL VPN in the available interface selection, please share the detailed reason with us. Thanks.

    Zyxel Melen


All Replies

  • PeterUK
    PeterUK Posts: 4,541 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    Its just something thats not been done might be for performance reason?

    But you can Packet Capture interfaces that the VPN exits.

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,894 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Answer ✓
    Options

    Hi @Rösti

    Currently method to capture the SSL VPN traffic is to use command "cmd traffic-capture tun0".

    If you need the Diagnostics - Packet Capture to support SSL VPN in the available interface selection, please share the detailed reason with us. Thanks.

    Zyxel Melen


  • Rösti
    Rösti Posts: 15 image  Freshman Member
    First Comment Friend Collector
    Options
    https://community.zyxel.com/en/discussion/comment/85760#Comment_85760

    🤦‍♂️just avoid your windbag replies in my posts.

  • Rösti
    Rösti Posts: 15 image  Freshman Member
    First Comment Friend Collector
    Options
    https://community.zyxel.com/en/discussion/comment/85766#Comment_85766

    Hi @Zyxel_Melen,

    Thanks for the hint, will use it that way.

    However, why it shall be a specific reason to have it in a GUI? I would be rather interested in why it is not there, as it seems it was deliberately done so…

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,894 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Hi @Rösti

    Packet Capture only lists interfaces that also appear on the Interface page. We chose not to show additional interfaces (such as the SSL VPN virtual interface) there, since users might otherwise think it's a bug rather than expected behavior.

    Zyxel Melen


  • PeterUK
    PeterUK Posts: 4,541 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    But Melen you make it sound like the user is expecting a simple device when the USG is anything but that?

    I take it thats why option like “override-direct-route” is not shown like it is in ZLD for advanced? Even if disabled by default?

  • Rösti
    Rösti Posts: 15 image  Freshman Member
    First Comment Friend Collector
    Options
    https://community.zyxel.com/en/discussion/comment/85794#Comment_85794

    Really strange to hear something like that.

    Maybe I'm exceeding my own expectations (I run simple SME site), but if I'm down the rabbit hole with the Packet capturing, I'm already knowing what I'm doing and why shall I be confused then?

    There are in fact much more advanced functionalities available on FLEX H platform in GUI, while tcpdump is a basic feature in networking area. IMHO, of course.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）