serverpal  Freshman Member

hi, solved! thank you

Hi, Solved! there was a problem inside tcp configuration in As400. thanks to everyone and especially to mMontana for last tip.

Hi, thank you for your help. I can't solve connection to iSeries (AS400). If I use Zywall secuExtender client from pc into external office I can ping As400 and connect to terminal emulation (by client access emulator port 23 telnet). IPSec (Ikev1) works with all ip of HEADQUARTERS Lan but not with iSeries. what is the…

yes, USG HEAD and USG EXTERNAL have NATT in Wan to Zywall security policy

192.168.8.2 is a iSeries Server (as400). from external office I can connect to headquarters by SSL secureextender client (usg40 HEADQUARTERS has SSL VPN configured), in secureextender insert HeadQuarters public IP, user and password and then get connection and I reach iSeries server by ping 192.168.8.2 but not with VPN…

Hi, Error was in external zywall configuration. LAN3 had lan 192.168.8.1 (same HEADQUARTER 192.168.8.0/24). now I ping from external to headquarter and viceversa but not all ip. example: in HEADQUARTER there is: 192.168.8.2 192.168.8.7 192.168.8.8 ... from external office I ping .7 and .8 but not .2 why?

hi, thank you for help. side External office (subnet 192.168.2.0/24): Vpn Connection: Policy: Ping to HEADQUARTER subnet: Zyxell Log External Office: side HEADQUARTER (subnet 192.168.8.0/24): Vpn connection: firewall: and does not work.

hi, thank you. there is ISP router between firewall and internet. on both sides I forwarded UDP and TCP ports 500 and 4500 to USGs devices. Enable "NAT Traversal" on both VPN Gateway (Phase 1) - DONE Don't forget to enable only one VPN Connection (Phase 2) as "nailed up", not on both USGs - DONE now I get connection on…

hi, this is IKE log IKE LOG USG40 HEADQUARTER: 12021-11-27 10:40:31infoIKEPeer not reachable192.168.1.237:500 XXX.XXX.XXX.XXX:500 (<---IP Static External office)IKE_LOG 22021-11-27 10:40:31infoIKEISAKMP SA [VPN_Gateway_Pal2] is disconnected192.168.1.237:500 XXX.XXX.XXX.XXX:500 (<---IP Static External office)IKE_LOG…

hi, now I configured Ikev1 on usg40 but nothing. External office USG20 IP lan 192.168.6.0/24 VPN GATEWAY: name TOHEAD Interface Wan1 static addres ip headquarters pre sharedkey MyPassword sa life time 86400 negotiation main AES128 SHA1 DH2 (no NAT trasv) USG VPN connection: Site to site VPN Gateway TOHEAD local policy…

Hi, thank you, for your help!

hi @PeterUK thank you, how can I do it?

hi @jasailafan, server XAMPP is in 192.168.8.7 port 20200 this is NAT rule: policy rule: outside lan http://myPublicIp:20200/mysite/index.html works! inside lan from smartphone or pc I have type 192.168.8.7:20200/mysite/index.html but I can not to type http://myPublicIp:20200/mysite/index.html

hi, I have the same problem. How can I to solve it?

hi, my isp router is managed from my ISP company (I cant to access it). NAT SOLVED, ISP company told me that open port has about two days of work and now I can connect to my server. Thanks to all, you have been very helpful !