Spielkultur_1  Freshman Member

Sorry for the late response. Yes that´s true. I will look at it again when I have time. Thanks for all!

I think yes, but why schould i do it if everything works great?

Sorry i meant 192.168.120.1... It is the router, which is connected before the USG.

Hi mMontana, i only have one ISP, but i could change the DNS in the USG back to 192.168.1.1 after the changes in the solution.

Hello together, finally i found the solution in this topic... https://businessforum.zyxel.com/discussion/2519/no-default-dns-for-wan1-on-usg40/p2 Set the local policy at Ipsec-VPN to 0.0.0.0 and disable the NAT 1:1 (from ISP-Router Public -> ZyXEL_WAN)

Hello PeterUK, thanks for your answer it worked!! But the USG still can´t connect to the Internet... Would you have an idea what it could be? As I said, it has to be somehow related to the L2TP behind Nat configuration ? Unfortunately that did not help...

Hmm ok but the bigger problem is that the firewall is currently unable to connect to the internet since I did the configuration for the L2TP connection behind Nat, but the clients on the network have normal internet if I set the DNS server to 8.8.8.8 in Interface for LAN1 instead of "Zywall" and deactivate the SSL…

Hello mMontana, I´ve changed it but i couldn´t see something showy...

Hello together, thank you very much for your answers :) I have created these rules...

Hey, would not that be covered by this Policy?

Hello mMontana, thanks for your answer! Yes i´ve configured it after this manual: https://support.zyxel.eu/hc/de/articles/360001390454-So-lassen-Sie-L2TP-Clients-%C3%BCber-USG-surfen But the problem is that the internet doesn´t work over the L2TP VPN too...