How to configure IKEv2 with MS-CHAPv2 on ZyWALL?

Zyxel_Emily Posts: 994
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
 Guru Member
edited June 2022 in VPN

The USG1100 must join an AD domain.

In the following example, domain name is

Go to CONFIGURATION > System > DNS > Address/PTR Record and add a record.

In this example, the IP of AD server is 

Go to AAA Server > Active Directory > AD object. Configure Domain Authentication for MSChap.
The user in this field should be “domain admin” privilege on your AD server. 

IKEv2 is established with AD account successfully.