uOS - Remote Access VPN with OIDC

Options
Zyxel_Claudia
Zyxel_Claudia Posts: 254
Network Detective-New Adventure Badge Network Detective Badge First Comment Friend Collector
image  Zyxel Employee
edited February 3 in Other Topics

Remote Access VPN with OIDC

The H Series supports OpenID Connect for remote access VPNs, specifically for SSL VPN deployments.

Compatibility Scope

  • Supported: SSL VPN using the OpenVPN Connect application.
  • Unsupported: IKEv2/IPsec and the Zyxel SecuExtender client are not supported as they lack a built-in browser to handle the OIDC login pop-up.

Setup Essentials

  • Pre-configure: Complete full OIDC setup
  • SSL VPN – Authentication Settings

  • Authentication Proxy: Must be enabled (default port 1003) and allowed in the WAN-to-Zywall security policy.
  • Redirect URI: Must be set to the WAN IP or public FQDN of the firewall so remote clients can finalize authentication.
  • Troubleshooting: If a timeout occurs, verify that port 10443 and port 1003 are allowed.

Categories

EnglishTiếng ViệtРусскийไทย中文（台灣）