Please ensure your question is specific...To enhance the quality of assistance, consider refining your query by providing more details about your issue and specifying the relevant information about your device. Alternatively, for personalized assistance, you can contact our support agents.Thank you for contacting us.Sorry, but we couldn't complete your request in time. It seems like the connection timed out or the server is busy. Please try reloading the chatbot.Skip to main content
Nebula Security Gateways (NSG) feature the possibility to build IPSec VPN tunnels to devices that are not controllable with Nebula - this, however, requires a bit of configuration of the NSG. This tutorial will show you an example configuration of an IPSec VPN Tunnel between one of our USG60 Firewalls and a Nebula NSG100.
Step-by-Step guide:
Make notes of the settings of phase 1 and phase 2 of the remote station (PSK, Encryption, Authentication, Lifetime, DH Group, Remote, and Local Policy)
Log in to nebula.zyxel.com with your account
Select the organization and site were to create the tunnel
Go to the submenu Gateway> Configure> Site-to-Site VPN
At the bottom of the page, you will find "Non-Nebula VPN Peers"
Click on Add, enter an appropriate name, the public IP and the remote policy of the remote site.
Important here, the Private Subnet setting will be used for PING check-in Tunnel. Therefore, if you will reach Subnet 192.168.5.0/24, please add here a reachable/available IP,(from your Gateway/Server) like 192.168.5.253/24 for Ping check.
In "IPsec policy", click on "default". Now you can adjust the settings. Enter the previously noted settings and confirm with OK
Now enter the PSK and select which network (entire network or only this site) should be reached via the VPN
Click Save
Also interesting:
Do you want to have a look directly on one of our test devices? Have a look here in our virtual Lab:
When adding private subnet (1:50) you can't use network address. IP has to be valid IP in that subnet. This IP will be used for connectivity checks. GW address works fine.
We and our partners use cookies on our site for delivering personalised content, ads and analyzing website traffic. This provides you with better browsing experience. By clicking ‘agree’ or navigating this site, you agree to the use of cookies described in our cookie policy. You can manage your cookie preferences at any time.
Zyxel periodically provides end-of-life information and migration recommendations to our valued customers.
custom
/hc/theming_assets/01J2ZZZN7PVVR88HREAMFW19F1
The Zyxel Community is an online platform dedicated to networking enthusiasts, IT professionals, and Zyxel product users.
custom
/hc/theming_assets/01J2ZZZNGB20MYAWFSNCPJ8QTF
FAQ
The Zyxel online FAQ, dedicate to the frequently asked questions.
USG FLEX L2TP Android, Nebula License Migration, NAS326 Twonky Media Server
Warranty Expiration Date:
Model Name:
The Serial Number that you provided does not correspond to a Zyxel device. To create a Support or Warranty case, please ensure you enter the correct Serial Number.
If your Serial Number is still not matching with our device records, you can proceed with initiating a web support request by completing the form below, once you have successfully registered or logged in.
Obadete se da govorite s predstavitel na uslugata.
Stremim se da otgovorim na vsichki obazhdaniya v ramkite na 3 minuti
no v natovareni vremena mozhe da ni tryabva malko poveche vreme
The query results above are limited to products sold by Zyxel Networks channel business in the EMEA region. They do not apply to other regions nor to products sold by Zyxel Communications.
You can proceed with the options below to receive further support:
Your Customer ID:
Dear Customer, your device was detected as a device purchased from an Internet Service Provider.
Please get in contact with your Internet Service Provider for Support- or Warranty services.
If you are unsure about who your ISP is, please have a look at this article: Click here to view the article!
We were unable to verify the Support and Warranty status of your device using the provided Serial Number. If you purchased your device in North America, please submit a support request to the US support team here. This portal is exclusively for products and services sold in the EMEA region.
Please attach an invoice of your defective device(s) as proof of purchase.
Dear Zyxel Customer,
We are currently experiencing issues with the Serial Number check, which may result in a timeout. Please try again later. In the meantime, you can sign in or continue using the options below without entering a Serial Number.
Thank you for your understanding.
Comments
2 commentsPlease sign in to leave a comment.
When adding private subnet (1:50) you can't use network address. IP has to be valid IP in that subnet. This IP will be used for connectivity checks. GW address works fine.
Dear Arno,
we have updated this article.
Thanks for your help.