Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a Zywall USG 20W (wireless disabled) behind a router supplied by my ISP. All ports (both TCP and UDP) on the ISP router are forwarded to the 20W.

I'm trying to configure an L2TP VPN to be used by Windows XP and Windows 7 with Microsoft's native VPN client. This was working before with a different firewall, so I'm pretty sure that all the required packets are flowing to the 20W.

I followed a tutorial from the Italian Zyxel Website, but I cannot get the VPN to work. Always cannot pass phase 2, and I see the following in the log:

[ID]: Tunnel [Default_L2TP_VPN_Connection] Phase 2 local policy mismatch

Phase 1 goes fine, and in the Windows event logs, the error is always Event ID 788.

This happens regardless the proposals I set in the phase 1 and 2 setting.
What should I check? Is there any way to get more detailed diagnostic info? (Policy mismatch is too generic.)

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.