How to configure IKEv2 with MS-CHAPv2 on ZyWALL?
Options

Zyxel_Emily
Posts: 1,452
Guru Member





The USG1100 must join an AD domain.
In the following example, domain name is usg.com.
Go to CONFIGURATION > System > DNS > Address/PTR Record and add a record.
In this example, the IP of AD server is 10.214.48.71.

Go to AAA Server > Active Directory > AD object. Configure Domain Authentication for MSChap.
The user in this field should be “domain admin” privilege on your AD server.


Result
IKEv2 is established with AD account successfully.


Tagged:
0
Categories
- All Categories
- 439 Beta Program
- 2.8K Nebula
- 199 Nebula Ideas
- 125 Nebula Status and Incidents
- 6.3K Security
- 489 USG FLEX H Series
- 322 Security Ideas
- 1.6K Switch
- 83 Switch Ideas
- 1.3K Wireless
- 47 Wireless Ideas
- 6.8K Consumer Product
- 284 Service & License
- 455 News and Release
- 89 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 95 Security Highlight