Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Zywall USG 20W (wireless disabled) behind a router supplied by my ISP. All ports (both TCP and UDP) on the ISP router are forwarded to the 20W.

I'm trying to configure an L2TP VPN to be used by Windows XP and Windows 7 with Microsoft's native VPN client. This was working before with a different firewall, so I'm pretty sure that all the required packets are flowing to the 20W.

I followed a tutorial from the Italian Zyxel Website, but I cannot get the VPN to work. Always cannot pass phase 2, and I see the following in the log:

[ID]: Tunnel [Default_L2TP_VPN_Connection] Phase 2 local policy mismatch

Phase 1 goes fine, and in the Windows event logs, the error is always Event ID 788.

This happens regardless the proposals I set in the phase 1 and 2 setting.
What should I check? Is there any way to get more detailed diagnostic info? (Policy mismatch is too generic.)

share|improve this question
Did you eventually solve this? Also: Do you have a link to that tutorial? – StackzOfZtuff Jun 26 '15 at 14:28
Sorry, but I finally changed the firewall with a Netgear. – Massimo Jul 1 '15 at 15:09
Okay, thanks. I didn't get anywhere either. (Not even past phase 1.) We also use a different VPN now. Too much time wasted on this already. – StackzOfZtuff Jul 1 '15 at 15:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.