ZyXEL Communications ZYWALL USG 1000 - EDITION 2 Manual page 899

• Make sure you have configured L2TP correctly on the remote user computers.
See Section 8.5 on page 173
• Make sure you configured an appropriate policy route on the ZyWALL.
• Make sure there is not a firewall between the ZyWALL and the remote users.
• If it is possible that the remote user's public IP address could be in the same
subnet as the specified My Address, click Configure > Network > Routing >
Policy Route > Show Advanced Settings and select Use Policy Route to
Override Direct Route.
• Modifying the VPN connection or the VPN gateway that L2TP uses disconnects
any existing L2TP VPN sessions. Disconnect any existing L2TP VPN sessions
before modifying L2TP VPN settings. The remote users must make any needed
matching configuration changes and re-establish the sessions using the new
settings.
I cannot get my VPN concentrator configuration to work.
• Turn off policy enforcement in the member VPN connections.
• Make sure your firewall rules are not blocking the VPN packets.
• If the USG ZyWALLs' VPN tunnels are members of a single zone, make sure it is
not set to block intra-zone traffic.
The VPN connection is up but VPN traffic cannot be transmitted through the VPN
tunnel.
If you have the Configuration > VPN > IPSec VPN > VPN Connection
screen's Use Policy Route to control dynamic IPSec rules option enabled,
check the routing policies to see if they are sending traffic elsewhere instead of
through the VPN tunnels.
I uploaded a logo to show in the SSL VPN user screens but it does not display
properly.
The logo graphic must be GIF, JPG, or PNG format. The graphic should use a
resolution of 127 x 57 pixels to avoid distortion when displayed. The ZyWALL
automatically resizes a graphic of a different resolution to 127 x 57 pixels. The file
size must be 100 kilobytes or less. Transparent background is recommended.
ZyWALL USG 1000 User's Guide
for examples.
Chapter 56 Troubleshooting
899