USG50/60 --> VPN Linux StrongSwan or other

BSA · August 9

Greetings community!
Has anyone solved the problem of IP-Sec connection on USG50/60 routers with a Linux/Windows VPN server? I have a distributed network with remote branches. I'm thinking of virtualizing my central core of the network and replacing the hardware router with a software solution. Has anyone succeeded in doing this?

Zyxel_Melen · August 10

Hi @BSA

If you want to use the server behind the USG 50/60, you need to ensure you have set the NAT/virtual server rules to forward the traffic from WAN to your server. Additionally, you also need to check your VPN server's firewall rule to let it allow public IP access.

BSA · August 10

I probably didn't explain it well.
What I have now: remote offices with USG50/60, connected to central office with Zywall 310 via IPSec VPN tunnels.
What I want: replace hardware router Zywall 310 with a software solution and relocate my servers to the cloud in data center.
If I keep the hardware router, I'll have to rent a rack and problems with a hybrid infrastructure.

Zyxel_Melen · August 11

replace hardware router Zywall 310 with a software solution

If you mean the VPN server, it should be no issue between the VPN server and USG50/60. But it seems like your server will be moved to cloud, and no server in central office. If this is what you want, you probole need to setup the remote VPN connection on your cloud server. Then you can connect to the cloud server via this remote access VPN.

BSA · August 11

it should be no issue between the VPN server and USG50/60.

That's great to hear. 🤗
What software would you recommend as a VPN server in this case?

USG50/60 --> VPN Linux StrongSwan or other

All Replies

Categories

Security Help Center