Fabio  Freshman Member

I set the USG 310 for VPN with Dynamic peer because I cannot have a fixed IP on the USG20W. My network provider provides the NAT, which gives an internal address to my ZyXEL (CGNAT). I cannot set the port forwarding on the NAT device. Is it possible to have a VPN using those limits? I cannot change my internet provider.…

sorry I make a mistake now it works.

I try according your suggestions but it does not work c:openssl pkcs12 -export -out etereru2.pfx -inkey etereru2.key -in etereru2.crt errno: -17011 errmsg: PKI certificate type is not supported windows import it correctly.

I understand that Zywall cannot import any STANDARD .pfx certificates, but only the certificates built with some selected software, and with a selected procedure .I will try to convert it.

I have done it, and the pfx (password protected) can be imported in widows, but the USG100 say the format is not supported

also the /31 is correct https://www.rfc-editor.org/rfc/rfc3021

I cannot ask My provider, he also shows me it works using another device. Why Zyxel does not support this /31 or there is any way to use it in a wan port ?

The connection is not PPOE, but it is Ethernet I double check with my provider. I can insert the network mask 255.255.255.254 on the wan port but it seems not working.

attached the logs and Ipconfig

1- Yes but do not change 2-yes we can connect but sometimes there is a disconnection 3- yes it's not stable 4- if you are talking from Firewall, other VPN are connected with no problems 5- coming soon

I update to 4.0.4.0 but error is still there ------------------------------------------------------------- Certificate Authority - G2[ 2021/03/05 04:22:41 ][SecuExtender Agent][DETAIL] SSL session is created[ 2021/03/05 04:22:43 ][SecuExtender Agent][DEBUG] SSL Connection is going to be closed[ 2021/03/05 04:22:43…

I have 4.0.3.0 I will try to update

Finally I was able to have the correct external group, and test works I try to add those groups to access a SSL VPN, but I cannot access. ( while if i add all ad users it works If I look the Secuextender log I see this ----------------------------------------------------------------------------------------------------…

I try adding: CN=PayaVPN,OU=Groups,OU=Singapore,DC=italy,DC=etere,DC=com In group identifier but even if in the result there is it says that user is not part of this group ---------------------------------------------------------------------------------------------- dn: CN=Maurizio…