Alex_91  Freshman Member

Question: what rule must be set in Policy Route? and in the firewall?

Full NAT from router to Firewall. in fact I can connect to the firewall web interface, there is already an active connection IPSec site to site in this moment and working fine. initially the l2tp did not work (it gave an error phase 2 mismatch), I had to set in phase 2 → policy public IP, now it connects for a few seconds…

I'm trying to configure L2tp over IPSec, I think I have the problem that my firewall is behind a NAT router. I read that you have to set a NAT on the firewall but I don't understand how, any help? basically the connection happens, it activates, but after a few seconds it closes

There are some news about this "problem"? (ability to specify which domain group can connect in VPN)

2FA via email feature for H series devices

Will 2FA via email ever be implemented on the H Series too?

Mmm, this feature could be added to ideas for future developments.

Yes correct, I answer: Firewall: on-prem (in this first case I would need it for a USG FLEX 200). After is possibile on H Series? admin page login of firewall → Configuration → Object → User → Add User Bonus 😊 / second question: (why if I put email address in second textbox I recaive email but no in first?) Simply allow…

clear, but to be able to access the file? (if I press the reset button it loads the default config)

from specific firmware or what? I can confirm that if I enter the various IPs manually in the rules (13.107.6.152/31, 13.107.18.10/31, 13.107.128.0/22, ...) the application works. If I leave the FQDNs alone (outlook.cloud.microsoft, outlook.office.com, outlook.office365.com) the app doesn't work.

Let's leave aside for the moment the question of whether it is needed (for incoming or outgoing access). Can FQDN resolve IP subnet? Example: outlook.cloud.microsoft -> 13.107.6.152/31 + 13.107.18.10/31 + … or is it really necessary to specify the various subnets manually?

I don't know if there is anything else that needs to be changed, but with the attached settings the system still doesn't work. (i'm using cable DAC10G-1M)

so it's impossible use Mac VPN without software Zyxel?

but am I wrong or is it possible to install and configure L2TP on the MacOS X Sonoma 14?

It seems the rule is present with that command. Thank you so much!!