-
How to enable Aggressive mode
The default is Main mode, Please type the following CLI to enable Aggressive mode FLEX200H> edit running FLEX200H running config# vrf main ike ike-policy-template {Profile Name} aggressive true FLEX200H running config# commit
-
It shows "Invalid DN syntax" when tested AAA server
Symptom: Try to lookup if the users valid in AD server but find the following error Check: Please verify User Name in AD is the following DN: CN={User Name}, CN=Users, DC={Your domain}, DC={Your domain} For example: CN=Administrator,CN=Users,DC=cso,DC=com
-
How to disable DPD in IPSec VPN
It needs to match the Peer setting, so turn off or adjust the DPD time. Please find the folloing option and set the period. (The value 0 means disable) Note: The option only be available within custom IPsec Profile
-
How to Configure SSL VPN connection with OpenVPN Connect client?
Scenario : This article will guide you on how to configure an SSL VPN connection with the OpenVPN Connect client. Answer : Please navigate to VPN > SSL VPN > to configure the Incoming Interface, Clients will use VPN to access, Client Network, Authentication relative information. Once it's done, please download the SSL VPN…
-
How to Configure Remote Access VPN with Zyxel VPN Client
This example shows how to setup Remote Access VPN on USGFLEX H and Zyxel VPN Client. The example instructs how to implement Remote Access VPN by SSLVPN and IPSec VPN Before Begin User & Authentication > User/Group > User Create local user for remote access authentication Download and install the new TGB Client Type 1: Set…
-
Can the VPN client provisioning port be separated from the device's web GUI HTTPS service port?
Question: Can the VPN client provisioning port be separated from the device's web GUI HTTPS service port? Answer: Currently, the configuration provisioning port is the same as the device's web GUI HTTPS port. It is not supported in the current version; however, it is part of our roadmap, and we plan to support it in the…
-
Which port is for VPN provisioning?
Question: In SSL VPN, the server port is 10443. In System > Settings, HTTPS port is 8443. Which port should I enter on SecuExtender for VPN provisioning? Answer: HTTPS port is used for VPN provisioning. In this example, if HTTPS port is modified in System > Settings, you also need to allow the modified HTTPS service port…
-
How to use iPhone import Provisioning script file to establish IPsec VPN connection?
Scenario : The USG Flex H series models allow users to download a VPN provisioning script file onto their iPhone and establish an IPsec VPN connection with the USG Flex H. This article will provide guidance on how to utilize this feature. Answer : Test condition : (1). The USG Flex 500 H with 1.10b8s1 firmware and the VPN…
-
How to Configure Remote Access VPN with Zyxel VPN Client
This example shows how to setup Remote Access VPN on USGFLEX H and Zyxel VPN Client. The example instructs how to implement Remote Access VPN by SSLVPN and IPSec VPN Before Begin User & Authentication > User/Group > User Create local user for remote access authentication Download and install the new TGB Client And Create…
-
Implement OpenVPN on FLEX H series
Before Begin You already completed SSLVPN setting on GUI. Edit Ovpn file 1)Please open notepad and paste the following then save with .ovpn extension. Here are Four Parts we need to fill in Where: 1)A Part: Fill in remote server address with port, For example: 10.214.48.34 10443 2)Access to Firewall by FTP and directory to…
-
How to Configure Site-to-site IPSec VPN between ZLD and uOS device
This example shows how to use the VPN Setup Wizard to create a site-to-site VPN with the Peer gateway is ZLD device. The example instructs how to configure the VPN tunnel between each site. When the VPN tunnel is configured, each site can be accessed securely. Set up IPSec VPN Tunnel for uOS VPN > Site to Site VP N >…
-
How to Configure IPSec Site to Site VPN while one Site is behind a NAT router
This example shows how to use the VPN Setup Wizard to create a site-to-site VPN with the Peer gateway is ZLD device. The example instructs how to configure the VPN tunnel between each site. When the VPN tunnel is configured, each site can be accessed securely. Set up IPSec VPN Tunnel for uOS VPN > Site to Site VPN >…
-
How to Configure Site-to-site IPSec VPN Where the Peer has a Dynamic IP Address
This example shows how to use the VPN Setup Wizard to create a site-to-site VPN with the Peer has a Dynamic IP Address. The example instructs how to configure the VPN tunnel between each site. When the VPN tunnel is configured, each site can be accessed securely. Set up IPSec VPN Tunnel for HQ VPN > Site to Site VPN >…