baba 
Master Member
Comments
-
Please, it's a very important feature
-
Hi @Zyxel_Melen vlan assignment with RADIUS is already working. I want to use the RADIUS User password as DPPSK to have user based authentication on WPA2/3 Standard (not Enterprise) SSIDs. Thanks! Best, baba
-
@Zyxel_Joshua thank you for the detailed explanation! If you have any idea about the wan route then you have made me happy! Thanks!
-
10.70.70.20 has 10.70.70.2 as default gateway. If 10.70.70.2 hop will be skipped when coming from 10.50.0.0/16 then 10.70.70.20 can not answer, or I am wrong?
-
Allowing asymmetrical routes may let traffic from the WAN go directly to the LAN withoutpassing through the ZyWALL. A better solution is to use IP alias to put the ZyWALL and the backup gateway on separate subnets. Found this in documentation. This means all WAN traffic now goes to LAN without NAT and Security Policy…
-
@Zyxel_Joshua rule #1 routes all incoming wan traffic from right USG to left USG. With this rule i want to ensure that left USG is also reachable from the public IP of right USG
-
Shouldn‘t be in Rule #3 next hop 10.70.70.2 instead of 10.70.70.20?
-
@Zyxel_Joshua thank you! Same config as mine so i have to enable the the "Policy Route overwrite Direct Route" option. Whats about Rule #1 in my screenshot? It must forward all traffic from wan1 Site B to USG Flex from Site A? Is it sage with the "Policy Route overwrite Direct Route" option? Thanks! Best, baba
-
@Zyxel_Joshua keep in mind that 10.70.70.20 must be routed to the VTI VPI, but 10.70.70.10 must still be accessible via the internal interface. So only 10.70.70.20 must be routed through VTI VPN not whole 10.70.70.X
