DOK

Thank you, but aren't USG110 - AAPH and ZYWALL USG 110 different devices/models?

hi this is the capure 192.168.11.34 is the nas i'm trying to reach through the vpn and the only client on the 192.168.11.0/24 subnet (excluding the usg which is the gateway and dns server)

also there is this.. If I start a network scan of the 192.168.11.0/24 subnet from the vpn, this is (part of) the log on the firewall as you can see it forwards each packet but i can't see any response coming back.

subnet 192.168.11.0/24 is the local lan, there are some clients and a nas. That's the nas' ip address, It's online, it can ping other clients and answers to a ping from anywhere. I can only reach the usg, i can ping it, ssh, and access to the webgui. I had the same result even without changing the mode config pool to a…

Hi, done but still the same results. 

thank you for your explanation but i think my picture wasn't clear enough. default route for site be should be the fibrechannel direct connection with site a, and, if that channel si offline, it should turn on wan1 and vpn. my idea was : SITE A : activate LAN2 with same subnet as site B (192.168.151.0/24) and assign let's…