How to configure IKEv2 with MS-CHAPv2 on ZyWALL?

Zyxel_Emily
Posts: 994
Guru Member





The USG1100 must join an AD domain.
In the following example, domain name is usg.com.
Go to CONFIGURATION > System > DNS > Address/PTR Record and add a record.
In this example, the IP of AD server is 10.214.48.71.

Go to AAA Server > Active Directory > AD object. Configure Domain Authentication for MSChap.
The user in this field should be “domain admin” privilege on your AD server.


Result
IKEv2 is established with AD account successfully.


Tagged:
0
Categories
- 7.8K All Categories
- 1.6K Nebula
- 55 Nebula Ideas
- 53 Nebula Status and Incidents
- 4.3K Security
- 217 Security Ideas
- 910 Switch
- 41 Switch Ideas
- 809 WirelessLAN
- 16 WLAN Ideas
- 5K Consumer Product
- 132 Service & License
- 260 News and Release
- 49 Security Advisories
- 6 Education Center
- 573 FAQ
- 273 Nebula FAQ
- 132 Security FAQ
- 73 Switch FAQ
- 72 WirelessLAN FAQ
- 7 Consumer Product FAQ
- Documents
- 34 Nebula Monthly Express
- 67 About Community
- 40 Security Highlight