L2TP VPN can't connects but access LAN or WAN via browser or RDP

Hello, 

I got the same problems some time ago. 

Have a look at this thread: https://community.sophos.com/products/xg-firewall/f/authentication/86417/connect-2-different-networks-via-vpn-site-to-site

The solution was to add only "2Rules" and check if the checkbox of "Rewrite sources adress (Masquerading)" is disabled. 

Hi Mathew,

Show me pictures of the configurations in the XG for L2TP and check #1 in my guide, show us drop-packet-captures which depict that XG is dropping all the mentioned connections.

Thanks

I went through the guide and made some adjustments. It didn't help. The connection was being blocked completely. I undid the changes and now the connection is dropped immediartely. Attached are screen shots of the configurations and the log. Thank you for any help you can give.

Hey, 

Please try to disable the NAT Policys in Rule ID 8. 

And Iam not sure, but I think that you don't need the Rule ID 9. Could you try to disable it ? 

Hi Mathew,

Did you capture any drop logs verifying #1 in the guide? The FW-rule comes into picture after the connection  hence, we will concentrate on establishing a connection with the XG first.

Follow these points and let me know if they help:

1. As the XG is behind a NAT device can you configure the Local L2TP port to * and the remote L2TP port to 1701. Back in the day, this was one of the workarounds to a bug-faced in Cyberoam.

2. Change the L2TP policy from Default to AES128_MD5. Read my answer in this post : https://community.sophos.com/products/xg-firewall/f/vpn/78308/problem-connecting-to-l2tp-vpn-from-android

Alongside, remove MASQ in the rule id 8.

If nothing helps then, I would like to see the internal settings of the L2TP adapter on the system trying to connect. Also, show me L2TP logs from the shell.

Thanks

I did not make any of the suggested changes. I applied the new Red Box update, rebooted the XG 210 and people started connecting to the VPN. I tested it myself from an outside connection and everything is working perfectly.

Thanks.