LOL  Freshman Member

I like Guest zone to have an independent Internet easily! good to know!

prefer this new looking +1

hi @pinger May I know what your external cloud based radius server is?

You can refer this discussion https://businessforum.zyxel.com/discussion/307/how-to-setup-l2tp-vpn-client-connection-with-authentication-server

Is NSG behind the NAT?

I already establish Site-to-Site VPN between NSG and Miceosoft Azure now. (is this want you want?? Just go to create Non-Nebula VPN peers under Site-to-Site VPN page, and set IPSec policy, selsct Azure in the Preset drop down list. There is easy to configure, eveything is done by Nebula. Cool :sunglasses:

If you device is managed by NCC and online, you can change password in Local credentials part through Site Wide > Configure > General Setting on NCC, and then use new password to login.