Lukas  Freshman Member

Thank you, @Zyxel_Tobias I have put public IP (withou gateway - ISP did not privede any gateway) to the wan1 interface: interface wan1 type external description TVINET VDSL upstream 10000 downstream 50000 mtu 1500 ping-check default-gateway method icmp period 30 timeout 5 fail-tolerance 5 probe-condition any no ping-check…

Hi @Zyxel_Tobias, Thank you for your answer. I know how to configure pulic IP on direct ethernet connections, but I am not sure where to put public IP in this situation - on wan1 or vlan848? First thing I need to test is simple PING from Internet. I have tried to set the public IP on wan1 and then on vlan848 interface, but…

Hi, thank you for all answers. The email traffic is not encrypted and I finally, I have come to conclusion, that the configuration is ok. The blockrule is not working and I did not manage to test it. But, I have received the log alert about malicious incoming email. So, at last, this looks like it is working. There are…

Hello @Zyxel_Emily, thank you for your answer. I have finally found the solution: it was my fault, I have forget, that first is applied NAT and THEN firewall. Now everything works as expected. If anyone had similar problem, here is relevant configuration: NAT rule: policy routing rule: firewall rule:

I have moved all configuration to the new ZyWALL 310 and voila, the new L2TP connetion behind the NAT is now working. Strange with is, that now this works even when I deacitvate the special NAT and firewall rule, but that is not a problem, of cource :smile: Thank you again very much @Zyxel_Emily :smiley:

Hi @Zyxel_Emily, thank you for all the informations. This week I will test L2TP behind NAT on the ZyWALL 310 and I hope everything will work :smile:

Hi @Zyxel_Emily, thank you very much, this explains everything :smile: I plan to replace the ZyWALL USG 50 with ZyWALL 310. Can I expect the ZyWALL 310 with latest firmware (I think 4.39) will be able to handle L2TP behind NAT with the above configuration? 

Hello Sébastien, I have very similar problem right now. Could you please send me your configuration, because I am stuck in the situation, that the IPsec tunnel is established, but then the client (Windows 7) starts waiting for some response and after 20-30 seconds ends up with error 809 (remote server does not respond). If…

So after couple of hours I have managed to pass Phase 2, however after the IPsec tunnel is established (see log screenshot below), the Windows client is waiting for response and then ends with error, that the remote server does not respond. What to add or change to complete the VPN connection? Here se ZyWALL IKE log…