uOS - Remote Access VPN with OIDC

Zyxel_Claudia

Remote Access VPN with OIDC

The H Series supports OpenID Connect for remote access VPNs, specifically for SSL VPN deployments.

Compatibility Scope

• Supported: SSL VPN using the OpenVPN Connect application.
• Unsupported: IKEv2/IPsec and the Zyxel SecuExtender client are not supported as they lack a built-in browser to handle the OIDC login pop-up.

Setup Essentials

• Pre-configure: Complete full OIDC setup
• SSL VPN – Authentication Settings
  
  
• Authentication Proxy: Must be enabled (default port 1003) and allowed in the WAN-to-Zywall security policy.
• Redirect URI: Must be set to the WAN IP or public FQDN of the firewall so remote clients can finalize authentication.
  
• Troubleshooting: If a timeout occurs, verify that port 10443 and port 1003 are allowed.