I have a central site with a Zyxel Zywall 310 and a remote site with a Zyxel USG 20w. I also have a working IPsec VPN between the two sites.

PCs on LAN1 of the remote site can access Server1 on LAN1 of the central site, but not Server2 on VLAN4 of the central site.

What rules would I need to add to allow PCs at the remote site (behind the USG 20w) to access Server2 on VLAN4 at the central site (behind the Zywall 310)?

Here's what the network looks like:

enter image description here

I suspect the solution may involve either Policy or Static Route rules (I currently have none set, though I've tinkered with them a bit, but was unable to get anything working).

  • Post IP assigned to central router on lan1 and vpn4, server 2 ip config and firewall configuration on routers. Where you where you have routing between lan1 and vlan4? – Adam Silenko Dec 11 '16 at 18:04

add route on remote router to VLAN4 network by central router ip 192.168.10.x, allow traffic from to on central router

  • Like I said, I've tried adding a route in the remote router, both as a Policy Route and a Static Route. Neither worked. The central site router has a security rule allowing traffic from any to VLAN4 . All LANs and VLANs on the central router can access VLAN4 just fine. – Nelson Hoover Dec 11 '16 at 1:53
  • Can you post this firewall rules? You can also do alternative config adding 2nd VPN tunnel between remote lan1 and central vlan4 – Adam Silenko Dec 11 '16 at 2:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.