VPN Issue with WG3526

[JakeRHill]

Hello!

I have a WG3526 (Firmware is "GoldenOrb_2019-03-06") accessing the internet via 4G LTE, and a Unifi USG behind it which is placed in a "DMZ" via port forwarding as described here.

The USG is serving as a VPN server (L2TP/IPSEC), but when I attempt to connect to the VPN (using the public IP address of the WG3526), it fails. I previously had the USG hooked up behind another Verizon 4G enabled (For simplicity, won't explain details) setup, and it worked fine.

I thought it might be firewall rules on the WG3526, so I disabled all the rules, and created a firewall rule to accept and forward any traffic to the USG, so the USG's firewall could address all the traffic. But still no joy. I do not know

Any ideas what I might be missing? Let me know if more info is required. Thanks in advance!

Jake

[swwifty]

is this your only gateway for the USG? I'd check to make sure packets are going back out the same interface.

[JakeRHill]

Yes, the WG3526 is the only gateway for the USG. I'll try to check that.

I feel that I am missing a setting within the WG3526's web admin dashboard. Is there a way to check a traffic log to see what the WG3526 is doing with my VPN connection attempt?

[JakeRHill]

I tested this by using the following commands on the WG3526 and the USG:

Code: Select all

$ tcpdump "dst port 500 or dst port 1701 or dst port 4500"

No traffic whatsoever when I try to initiate a LT2P/IPSEC VPN connection to the USG from a device outside of the network.