607219
69
Zoom out
Zoom in
Previous page
1/150
Next page
ZyWALL USG 20-2000 User’s Guide 69
CHAPTER 4
Create Secure Connections Across the
Internet
These sections cover using VPN to create secure connections across the Internet.
IPSec VPN on page 69
VPN Concentrator Example on page 71
Hub-and-spoke IPSec VPN Without VPN Concentrator on page 73
ZyWALL IPSec VPN Client Configuration Provisioning on page 75
SSL VPN on page 77
L2TP VPN with Android, iOS, and Windows on page 79
One-Time Password Version 2 (OTPv2) on page 92
4.1 IPSec VPN
Besides using the VPN quick setup wizard to configure settings for an IPSec VPN tunnel, you can
use the Configuration > VPN > IPSec VPN screens to configure and activate or deactivate VPN
gateway and IPSec VPN connection policies. You can also connect or disconnect IPSec VPN
connections.
•Use the VPN Gateway screens to manage the ZyWALL’s VPN gateways. A VPN gateway specifies
the IPSec routers at either end of a VPN tunnel and the IKE SA settings (phase 1 settings). You
can also activate or deactivate each VPN gateway.
•Use the VPN Connection screens to specify which IPSec VPN gateway an IPSec VPN connection
policy uses, which devices behind the IPSec routers can use the VPN tunnel, and the IPSec SA
settings (phase 2 settings). You can also activate or deactivate and connect or disconnect each
VPN connection (each IPSec SA).
4.1.1 Test the VPN Connection
After you configure the VPN gateway and VPN connection settings, set up the VPN settings on the
peer IPSec router and try to establish the VPN tunnel. To trigger the VPN, either try to connect to a
device on the peer IPSec router’s LAN or click Configuration > VPN > IPSec VPN > VPN
Connection and use the VPN connection screen’s Connect icon.
4.1.2 Configure Security Policies for the VPN Tunnel
You configure security policies based on zones. The new VPN connection was assigned to the
IPSec_VPN zone. By default, there are no security restrictions on the IPSec_VPN zone, so, next,
you should set up security policies that apply to the IPSec_VPN zone.
69


Need help? Post your question in this forum.

Forumrules


Report abuse

Libble takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Product:

For example, Anti-Semitic content, racist content, or material that could result in a violent physical act.

For example, a credit card number, a personal identification number, or an unlisted home address. Note that email addresses and full names are not considered private information.

Forumrules

To achieve meaningful questions, we apply the following rules:

Register

Register getting emails for ZyXEL ZyWALL USG 20 at:


You will receive an email to register for one or both of the options.


Get your user manual by e-mail

Enter your email address to receive the manual of ZyXEL ZyWALL USG 20 in the language / languages: English as an attachment in your email.

The manual is 7,47 mb in size.

 

You will receive the manual in your email within minutes. If you have not received an email, then probably have entered the wrong email address or your mailbox is too full. In addition, it may be that your ISP may have a maximum size for emails to receive.

Others manual(s) of ZyXEL ZyWALL USG 20

ZyXEL ZyWALL USG 20 Quick start guide - English, German, French, Italian, Swedish, Spanish - 2 pages


The manual is sent by email. Check your email

If you have not received an email with the manual within fifteen minutes, it may be that you have a entered a wrong email address or that your ISP has set a maximum size to receive email that is smaller than the size of the manual.

The email address you have provided is not correct.

Please check the email address and correct it.

Your question is posted on this page

Would you like to receive an email when new answers and questions are posted? Please enter your email address.



Info