Zywall 310 - Multi spte VPN - Client L2tp Cant browse remote sites
Afternoon
Ive a multi site VPN setup, a zywall 310 is at the hub site. 5 remote sites inter-routing ok (am using the VPN concentrator feature)
Ive now setup Mac VPN clients, Then connect to the hub site ok and can ping / browse that hub sites LAN ok.
However i am unable to ping any other site.
When doing a trace route to a remote site lan the third hop is the WAN ip of the hub site.
0
All Replies
-
Good answer.On thinking about your answer, I do have intersite routig working ok betweek site - site vpn.I notice I cannot add the L2TP VPN into the VPN concentrator.Should I be looking at policy routes0
-
Hi @Emerald,
The concentrator is configured on the hub site and L2TP VPN client is connected to the hub.
Create a policy route on the hub site and the spoke site respectively.
Hub
Incoming: L2TP VPN tunnel
Destination Address: Subnet of spoke_1 site
Next-Hop: site to site VPN tunnel between hub and spoke_1
Spoke_1
Source Addrsss: Subnet of spoke_1 site
Destination Address: L2TP VPN pool of the hub site
Next-Hop: site to site VPN tunnel between hub and spoke_1
0
Categories
- All Categories
- 347 Beta Program
- 2.1K Nebula
- 114 Nebula Ideas
- 77 Nebula Status and Incidents
- 5K Security
- 44 USG FLEX H Series
- 246 Security Ideas
- 1.2K Switch
- 65 Switch Ideas
- 901 WirelessLAN
- 33 WLAN Ideas
- 5.8K Consumer Product
- 204 Service & License
- 326 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.8K FAQ
- 831 Nebula FAQ
- 401 Security FAQ
- 219 Switch FAQ
- 190 WirelessLAN FAQ
- 45 Consumer Product FAQ
- 136 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 71 About Community
- 61 Security Highlight