Solved

Using VPN with a draytek behind a zyxel firewall

Posted on 2015-01-18
2
319 Views
Last Modified: 2015-01-29
Hi,

i am trying to install a draytek device only for VPN behind a zyxell zywall usg200.
If i connect to the draytek from intenal lan i can access vpn and authenticate.
But if i connect from outside, i cant connect. So i think the Zyxell blocks it?

I inserted the following:

Route-Policy
    incoming: any
    Source: NAT Internal IP
    Destination: NAT internal IP
    Service: GRE and pptp (1723)

NAT:
    Interface: WAN2
    Original IP: NAT Internal IP
    Mapped IP: Draytek IP
    Port: PPTP (1723)
    Protokoll: TCP

Similar settings work fine with RDP or https. But i can´t access VPN. I deactivated everything of VPN i found in zywall.
0
Comment
Question by:loosain
2 Comments
 
LVL 91

Accepted Solution

by:
John Hurst earned 500 total points
ID: 40556785
Did you try NAT Traversal on the Draytek?  You have created a double NAT type of situation.

Can you use the Draytek as firewall also and eliminate the other firewall (in other words, why so complicated?)
0
 

Author Closing Comment

by:loosain
ID: 40577159
Our customer wants it so. I have a new question started with a little more detailed information:

http://www.experts-exchange.com/Hardware/Networking_Hardware/Firewalls/Q_28606217.html
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now