Zyxel ZyWALL USG 20 [77/150] Ssl vpn

Chapter 4 Create Secure Connections Across the Internet

ZyWALL USG 20-2000 User’s Guide

6 Click OK. The rule settings are now imported from the ZyWALL into the ZyWALL IPSec VPN Client.

4.4.3 What Can Go Wrong

• VPN rule settings violate the the ZyWALL IPSec VPN Client restrictions:

Check that the rule does not contain AH active protocol, NULL encryption, SHA512

authentication, or a subnet/range remote policy.

The ZyWALL IPSec VPN Client can also indicate rule violations. Check its warning screen.

Although the rule settings may be valid, whether the tunnel actually works depends on the

network environment. For example, a remote policy IP address for a server may be valid, but

the server may be down or have an actual different IP address.

• There is a login problem:

Reenter the user name (Login) and password in the ZyWALL IPSec VPN Client exactly as

configured on the ZyWALL or the external authentication server.

Check that the client authentication method selected on the ZyWALL is where the user name

and password are configured . For example, if the user name and password are configured on

the ZyWALL, then the configured authentication method should be Local.

• There’s a network connectivity problem between the ZyWALL and the ZyWALL IPSec VPN Client:

Check that the correct ZyWALL IP address and HTTPS port (if the default port was changed)

was entered.

Ping the ZyWALL from the computer on which the ZyWALL IPSec VPN Client is installed.

If there is no reply, check that the computer has Internet access.

If the computer has Internet access, contact the ZyWALL administrator.

• The entry is not activated:

Make sure that both Enable Configuration Provisioning in Configuration > VPN > IPSec

VPN > Configuration Provisioning is selected and that the entry has a yellow Status icon.

4.5 SSL VPN

SSL VPN uses remote users’ web browsers to provide the easiest-to-use of the ZyWALL’s VPN

solutions. A user just types the ZyWALL’s web address and enters his user name and password to

securely access the ZyWALL’s network. Here a user uses his browser to securely connect to network

resources in the same way as if he were part of the internal network.