VPNLess
@ntl.com
| Zyxel Vpn
Hi ,
hoping someone here can help,I'm new to VPN setup so here we go,
Just bought a Zyxel 662-HW dsl router for our small office,we use it to assign (DHCP) ip's to our small Lan,and access the internet via the Zyxel .I've enabled remote management and it all works quite well.
I've been trying to set up the VPN side of things and have had
support from Zyxel UK, but stil not working.
The scenario is I have a dynamic IP assigned to me when at home by my ISP (I'm running XP pro).
The Zyxel 662 has a static IP .
I'd like to be able to VPN from home to the Office
All help appreciated
Paul |
|
Anav
Sarcastic Llama? Naw, Just Acerbic
Premium
join:2001-07-16
Dartmouth, NS | You will need to get an IPSEC client for home to be able to connect to the router at the office. |
|
haroldbarnes
join:2001-06-28
Garland, TX | reply to VPNLess
I second Anav, and suggest you study the router and VPN client logs to figure out what is happening. Post those here for help. |
|
DavidJWood
Premium
join:2001-10-12
UK
| reply to VPNLess
Seeing as you're in the UK, the client is pretty cheap - see, for example, here. Nobody has found a way to make the IPsec client built in to Windows XP work with dynamic IP addressing; I believe it's impossible with ZyXEL kit due to the ID scheme used.
I don't have a guide to setting up VPNs with earlier versions of ZyNOS than 3.64 (the "how to" I posted that many people refer to only applies to the new VPN code in ZyNOS 3.64 and upwards, which is only on the newer ZyWALLs). However, it should be straightforward enough.
I can't remember just how capable or not the P662HW's VPNs are - they don't have all the bells and whistles of the ZyWALLs, but it should be enough to do the job. The dynamic IP at home shouldn't be a problem; create the rule with 0.0.0.0 as the remote IP address and use any ID type except IP. With DNS or Email, they're just textual strings - the remote ID at one end must match the local ID at the other, and vice versa.
If you've got a connection but no traffic, the problem may be the client IP address. If you're using the ZyXEL client (or any other variant of Safenet SoftRemote), I can walk you through that one.
Finally, if you're using Windows XP SP2 and the ZyXEL client or any other variant of Safenet SoftRemote, you must have at least version 10.3.5 Build 6 for it to work properly.
David |
|
VPNLess
@ntl.com
| Hi,
many thanx for the advice .
I take it I need to buy Zyxel ZyWall Remote Security VPN Client to make a conection to the 662 ?
As for VPN logs at the moment I have none as the VPN connection can't be made, as I was trying to use XP's built in network wizard to add a new VPN connection and kept getting error 800.
I'll post a screenshot of the VPN router config as soon as I can
many thnx |
|
Anav
Sarcastic Llama? Naw, Just Acerbic
Premium
join:2001-07-16
Dartmouth, NS
| Netgear uses the same rebadged client (Safenet Softremote Lite) and may be cheaper if you look around. Just ensure its version 10.3.5 build 6 or something like that.........supposed to be fully compatible with XP.
--
Ain't nuthin but the blues! "Albert Collins". Leave your troubles at the door! "Pepe Peregil" De Sevilla. Just Don't Wifi without WPA, "Yul Brenner"LlamaWorks Equipment |
|
DavidJWood
Premium
join:2001-10-12
UK
| In the UK, the ZyXEL client is slightly cheaper than the Netgear branded version - it shouldn't cost more than about £25 per copy including VAT (tax).
Version 10.3.5 Build 6 is required for Windows XP SP2 compatibility. I bought my copy of the client in the UK some time ago, and had that version in the box.
David |
|
