Thank you. The ZyXel hardware is really very good hardware. I have worked with it before.
I think I understand now how you are connecting, if the ZyXel is configured as a bridge endpoint in a private network for the ISP. The actual routing detail is something the ISP takes care of. The result, is that you get an actual straight through Internet connection with no intervening NAT/firewall that the ZyXel would normally provide. Your earlier “ipconfig /all” would seem to support that understanding.
What that means, is that the 10.x.x.x ISP address isn’t really relevent to your configuration. It’s something the ISP takes care of, and should be invisible to your operation.
The one detail missing, is the address space of the Uni PPTP VPN once the connection is made. Probably something in a private address space, but it could be in the Uni address space. It will take connecting at least once to find out.
To get that connection, here’s a ruleset for you. These rules need to be added to your Global Rules, and need to be the very first rules at the top of the Global Rules list.
- Allow UDP In&Out from any to singleIP[255.255.255.255] where srcport is any and destport is range[67-68]
- Allow IP In&Out from zone[UniVPN] to zone[UniVPN] where protocol is any
- Allow IP In&Out from zone[UniVPN] to zone[Multicast] where protocol is any
where these rules make use of two CFP network zones.
The first zone, UniVPN, is something of an unknown. As a guess, I would have this network zone contain these 4 address spaces:
the Uni space of 188.8.131.52 mask 255.255.0.0
the private space 10.0.0.0 mask 255.0.0.0
the private space 172.16.0.0 mask 255.240.0.0
the private space 192.168.0.0 mask 255.255.0.0
Which of those address spaces is actually in use, can be determined with an “ipconfig /all” the VPN connection is make and working.
The second zone, Multicast, is the special address space 184.108.40.206 mask 240.0.0.0. This gets used by routing protocols and other special services.
Once these rules are in place, you should be able to go to your Windows Network Connections, and right-click your xDSL and select Connect, and get connected to the Uni VPN server.