Hi all. I have Zywall 110 with v4.10 (AAAA.0) and it used to have L2TP , IPsec (for both ISP providers) configured and functional. At that time I had one public IP and everything worked like a charm. IPsec clients are connecting by using Shrew soft.
Now we have a block of IPs that includes one static IP - router reserved.
I used the very same configuration (from one public IP with IPsec) and configured it with the router IP from the new IP block. I then have an issue with the firewall that is dropping packets because the rule for IPsec is not recognized.
Even if I create new rule it will drop the packets.
After a day of trial and error - I decided to use Wizard and create a new IPSec. I am using exactly the same parameters - and voila - tunnel enabled!
Now I hit the wall since on the client I don't have internet and I cannot ping or access to remote resources.
This is really strange since IPsec doesn't have routing policies and especially because entire traffic is routed through the tunnel which was not the aim.
Can you please tell me what to do. Do you really need to factory reset and configure it all over again just because IP was changed? I believe that I need to do that since I had the problem with just using the new IP in the old configuration.
Please advice this is rather urgent and I don't have any more ideas. Zyxel support was not that helpful as they have IPsec examples from v3.1 and then they are just referring to their knowledge base ..... There is an example with only one static IP and not sure if multiple IPs change something.
I wanted to perform factory reset and to repeat the config but then I need redo entire conf which is a bit demanding.
↧