jasailafan  Master Member

Could you describe the way you access caldav? Is it a caldav server in lan and you'd like to access it through NAT from wan(DDNS)?

Here are some examples using strongswan on Linux to establish vpn. I hope these will help. https://community.zyxel.com/en/discussion/15678/usg-flex-200-no-proposal-error-with-strongswan https://community.zyxel.com/en/discussion/9890/i-can-connect-from-windows-10-but-cant-from-linux

Seems CA is invalid. Do you select the default certificate?

If you use wan1_ppp, just configure 0.0.0.0 on Ethernet > wan1.

You need to block YouTube by app patrol, but usg flex 50w doesn't have this feature. https://community.zyxel.com/en/discussion/14682/how-to-block-youtube-access-by-schedule

How about adding a policy route? Incoming: zywall Destination: ..93.125 Next hop: ge7=..110.75

@NoE Is the scenario similar to this example? You may follow the steps in the guide "bridge_scenaro.pdf". https://community.zyxel.com/en/discussion/comment/5137#Comment_5137

@Davidcloude2023 Try to enable NetBIOS broadacst over IPSec on both devices and you should be able to access the shared folder are the remote site by IP address without extra policy routes. Here are some examples. https://community.zyxel.com/en/discussion/comment/33694#Comment_33694…

It will be more clear if you turn these descripions into a topology and mark each device with its ip address.

Seems the current failover count reached the max. failover count. You can try to use the command to reset the counter. Router> debug device-ha2 send failover 0https://kb.zyxel.com/KB/searchArticle!gwsViewDetail.action?articleOid=015799&lang=EN

If you have another vpn gateway, build up a vpn tunnel between USG20 and the vpn gateway and force the traffic from Playstation 4 to access the internet through the wan of the vpn gateway.

@FelipeMaybe you need to add extra routing rule on the firewall to make computers in the headquarters reach the remote computer. If your firewall is not zyxel's usg series, you can consult the technical support of the firewall vendor about the configuration.

@valerio_vanniThe VPN secret and password setting are saved on Apple device. Maybe you should check with Apple if these settings are able to be not saved.

@FabioHere is some useful information about /30 and /31. The subnet /31 is used in point-to-point link. If you'd like to configure it on ethernet wan connection, maybe you can ask ISP to give you /30.https://networkengineering.stackexchange.com/questions/68718/32-bits-or-30-bits-for-subnet-mask

For 1:1 NAT rule, you don't need to create extra policy route. The policy route has higher priority than 1:1 SNAT. Disable your additional Routing Policy and check it again.