What Could Go Wrong - ZyXEL Communications ZyWALL ATP Series Handbook

www.zyxel.com

What Could Go Wrong?

If you see [alert] log message such as below, please check ZyWALL/USG L2TP
Allowed User or User/Group Settings. iOS Mobile users must use the same
Username and Password as configured in ZyWALL/USG to establish the L2TP VPN.
If you see [info] or [error] log message such as below, please check ZyWALL/USG
Phase 1 Settings. iOS Mobile users must use the same Secret as configured in
ZyWALL/USG to establish the IKE SA.
If you see that Phase 1 IKE SA process has completed but still get [info] log
message as below, please check ZyWALL/USG Phase 2 Settings. ZyWALL/USG unit
must set correct Local Policy to establish the IKE SA.
Ensure that the L2TP Address Pool does not conflict with any existing LAN1, LAN2,
DMZ, or WLAN zones, even if they are not in use.
If you cannot access devices in the local network, verify that the devices in the
local network set the USG's IP as their default gateway to utilize the L2TP tunnel.
279/782