CMruk  Freshman Member

HI all, Zywall 310 IPSec IKEv1 VPN with PaloAlto build successful and run like charm. Thank you for tips.

Hi @zyman2008, i am not administrator Palo Alto, it,s another local government office which i have to cooperate for some centralized project. I will try arrange IKEv1 setup in Monday, maybe with some luck :)

Hi, thank you for tips this is my setup in P2 10.0.0.0/24 is my LAN 10.10.80.0/24 virtual VPN net my log shows [SA] : TS unacceptable this longing send to me form PaloAlto device I am stuck for now with this, i don't know PaloAlto but maybe another VPN like IKEv1 will not trigger this problems?

Hello @Zyxel_Jerry yes i can provide remote access, please send me PM with details and i will prepare remote access 

Hello, i already wrote it before, both device is connected directly to ISP device in transparent bridge mode, there is not any NAT in both end's.

Hi, configuration is updated like you advice but still same problem, L2TP/IPsec client can't connect, when is more then 2 "two" sesion's SSL VPN client for me, it's seem like authentication process not working properly in that condition, in log i see "tunnel is build successful " , but nothing about permission granted or…

Hello @Zyxel_Jerry firmware information, currently running on device's, config file from USG20 and Zywall 310 package capture files was send via PM Zywall 310 Nazwa systemu:zw310 Nazwa modelu:ZyWALL 310 Numer seryjny:S172L34100353 Zakres adresów MAC xx:xx:xx:xx:xx:xx ~ xx:xx:xx:xx:xx:xx Wersja oprogramowania:V4.38(AAAB.0)…

Hi @Zyxel_Jerry, answering Your question, "Can you describe more details about “when is more then 2 SSL VPN secession up new L2TP client can't connect.” it's mean, is 2 or more SSLVPN user have establish connection to device (site) using SecuExtender (v4.0.3), usually there is around 10-15 client up, answering Your…

Thank you for responding, unfortunately the problem still exist. when is more then 2 SSL VPN secession up new L2TP client can't connect. Can you pleases provide any guide how to collect "device’s packet on LAN &WAN interface"?

Hi, this is my topology SSL VPN use 10.100.200.0/24 network L2TP/IPSec use 10.10.1.0/24 network N2N USG-20 LAN 10.20.30.0/24 here is the log when L2TP client trying establish tunnel and N2N Ipsec and config sent out via pm

And when is no more SSL VPN sessions, everything working again.