Page 1 of 1

VPN Issue with WG3526

Posted: Wed May 08, 2019 9:48 am
by JakeRHill
Hello!

I have a WG3526 (Firmware is "GoldenOrb_2019-03-06") accessing the internet via 4G LTE, and a Unifi USG behind it which is placed in a "DMZ" via port forwarding as described here.

The USG is serving as a VPN server (L2TP/IPSEC), but when I attempt to connect to the VPN (using the public IP address of the WG3526), it fails. I previously had the USG hooked up behind another Verizon 4G enabled (For simplicity, won't explain details) setup, and it worked fine.

I thought it might be firewall rules on the WG3526, so I disabled all the rules, and created a firewall rule to accept and forward any traffic to the USG, so the USG's firewall could address all the traffic. But still no joy. I do not know

Any ideas what I might be missing? Let me know if more info is required. Thanks in advance!

Jake

Re: VPN Issue with WG3526

Posted: Wed May 08, 2019 10:23 am
by swwifty
is this your only gateway for the USG? I'd check to make sure packets are going back out the same interface.

Re: VPN Issue with WG3526

Posted: Wed May 08, 2019 2:00 pm
by JakeRHill
Yes, the WG3526 is the only gateway for the USG. I'll try to check that.

I feel that I am missing a setting within the WG3526's web admin dashboard. Is there a way to check a traffic log to see what the WG3526 is doing with my VPN connection attempt?

Re: VPN Issue with WG3526

Posted: Wed May 08, 2019 3:39 pm
by JakeRHill
I tested this by using the following commands on the WG3526 and the USG:

Code: Select all

$ tcpdump "dst port 500 or dst port 1701 or dst port 4500"
No traffic whatsoever when I try to initiate a LT2P/IPSEC VPN connection to the USG from a device outside of the network.