[ATP/FLEX] How to Set up IKEv1 VPN tunnel and Authenticate with your AD server on Nebula Gateway
![Zyxel_Stanley](https://us.v-cdn.net/6029482/uploads/defaultavatar/nN4PAQRO7TCNP.jpg)
![](https://us.v-cdn.net/6029482/uploads/userpics/FN0BI9T10CTX/n6O940IZ5DEW6.png)
![Sixth Anniversary](https://us.v-cdn.net/6029482/uploads/badges/WVWKILF3S3LD.png)
![10 Comments](https://us.v-cdn.net/6029482/uploads/badges/818CA6MI9BTU.png)
![100 Answers](https://us.v-cdn.net/6029482/uploads/badges/64OW7WFEOGRW.png)
![Friend Collector](https://us.v-cdn.net/6029482/uploads/badges/HNJASEUSC535.png)
Nebula Control
Center provides a VPN solution that allows remote VPN users to connect VPN
tunnels from Internet. This guide will assist in the configuration IKEv1 VPN
tunenl and authenticating with exist AD domain server.
Set up external authentication server setting
Go to Configure > Firewall > Firewall settings and configure AD information in “My AD Server” and set up:
a. Authentication object name
b. AD Server IP address
c. AD service port
d. AD domain name
e. Domain admin account
f. Domain admin account password
Set up VPN setting on gateway
Go to Configure > Firewall > Remote access VPN page and enable IPSec VPN Server function and set up:
a. Client VPN Subnet.
b. IKE version
c. DNS server (optional or stay in default)
d. Secret key
e. Authentication Type.
![](https://us.v-cdn.net/6029482/uploads/editor/vc/roz7gmkjyxo5.png)
Configure VPN setting on your iPhone
Go to Setting > General > VPN & Device Management > VPN and click on Add VPN Configuration button to create a VPN profile on your iPhone and set up:
a. VPN Type
b. VPN Description
c. Server IP address
d. AD account
e. AD account password
f. Secret key
![](https://us.v-cdn.net/6029482/uploads/editor/1d/lubb8b1w1tbw.png)
Test the Result
After VPN tunnel is established, the status will display as Connected on your iPhone and a VPN icon displays on title bar.
![Image: https://us.v-cdn.net/6029482/uploads/editor/z2/fl6tgs8ikw3o.png](https://us.v-cdn.net/6029482/uploads/editor/z2/fl6tgs8ikw3o.png)
You can also check the VPN client status on Nebula server.
Go to Monitor > Firewall > VPN Connections > Client to site VPN login account. It will display authenticated name, assigned IP, and incoming IP address.
![Image: https://us.v-cdn.net/6029482/uploads/editor/ks/ifh6pin8qto0.png](https://us.v-cdn.net/6029482/uploads/editor/ks/ifh6pin8qto0.png)
Share yours now!
Stanley
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 88 Nebula Status and Incidents
- 5.4K Security
- 166 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight