L2TP errors from behind USG20-VPN
christopher
Posts: 1 Freshman Member
Happy new year!
I am stumped on an issue I'm having with Android/iOS L2TP clients connecting to a Zywall USG20 from behind a USG20-VPN. The initial connections is connecting fine but after a few minutes to hours, the traffic will stop flowing on the L2TP session. When checking the USG20-Zywall log, there are a bunch of ipsec errors such as no policy found, dropping TCP/UDP/ESP/NAT-T packets. When checking the USG20-VPN log, it looks like it is responding to the IKE request without having any VPN's configured. I went down to the default config and still see ipsec messages in the log. When using a Windows 10 L2TP connections, there are no drops and works fine.
The traffic seams to stop right after the Zywall USG 20 sends a SEND HASH NOTIFY R U THERE. once that appears then the dropped packet message start rolling in with strange port number like 1024-1027.
When using a consumer router, no issues appear.
Diagram
Android Phone/tablet -----> Access Point ------> USG20-VPN ------>USG20-Zywall-----> LAN
I am stumped on an issue I'm having with Android/iOS L2TP clients connecting to a Zywall USG20 from behind a USG20-VPN. The initial connections is connecting fine but after a few minutes to hours, the traffic will stop flowing on the L2TP session. When checking the USG20-Zywall log, there are a bunch of ipsec errors such as no policy found, dropping TCP/UDP/ESP/NAT-T packets. When checking the USG20-VPN log, it looks like it is responding to the IKE request without having any VPN's configured. I went down to the default config and still see ipsec messages in the log. When using a Windows 10 L2TP connections, there are no drops and works fine.
The traffic seams to stop right after the Zywall USG 20 sends a SEND HASH NOTIFY R U THERE. once that appears then the dropped packet message start rolling in with strange port number like 1024-1027.
When using a consumer router, no issues appear.
Diagram
Android Phone/tablet -----> Access Point ------> USG20-VPN ------>USG20-Zywall-----> LAN
0
Comments
-
Hello christopher,
I want to confirm with you that in this scenario, the win10 can establish l2tp vpn with USG20, but Android/IOS cell phone have issue? If so, could you please check that can cell phone establish l2tp connection with public IP?(Cell phone connect with l2tp server directly)
Also, I want you check have you enable "NAT-T" in the USG ZyWALL's IPSec VPN Gateway setting.
Moreover, to analyze this case, when the issue occur, please screenshot complete log.
Charlie0
Categories
- All Categories
- 347 Beta Program
- 2.1K Nebula
- 114 Nebula Ideas
- 77 Nebula Status and Incidents
- 5K Security
- 44 USG FLEX H Series
- 246 Security Ideas
- 1.2K Switch
- 65 Switch Ideas
- 901 WirelessLAN
- 33 WLAN Ideas
- 5.8K Consumer Product
- 204 Service & License
- 326 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.8K FAQ
- 831 Nebula FAQ
- 401 Security FAQ
- 219 Switch FAQ
- 190 WirelessLAN FAQ
- 45 Consumer Product FAQ
- 136 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 71 About Community
- 61 Security Highlight