[NEBULA] How to configure the Zyxel VPN client to Nebula Control Center ?
Zyxel VPN client
How to configure the Zyxel VPN client to Nebula Control Center.
Since Nebula phase 8.1 we have support IPSec VPN client which allow you to connect your devices at home to a VPN server at your work place.
Figure 1 Connect IPSec VPN tunnel via home
In this scenario client can still connect to the tunnel even it uses private IP (located behind the NAT gateway). On the other hand, if your NSG is located behind the NAT gateway then please remember to set port forwarding on UDP 4500 and 500 on it (NAT gateway) and also remember to configure NAT traversal. (NAT-T)
You will need to download and install Zywall IPSec VPN client in Zyxel download library, this application which can fulfill the scenario of client to server VPN.
1 In security gateway>Remote access VPN select client VPN server as IPSec client and also notice the pool size you have configure. For instance, if subnet is /32, it means only 1 host can reach to the server.
2 Create VPN client user in Organization-wide>Cloud authentication if your auth. type is Nebula Cloud Authentication.
3 Back to the IPSec VPN client application right click on IKEv1Gateway and create New VPN Connection.
4 Enable Mode Config and X-Auth Popup in IKEv1 Gateway (In Advanced tab).
5 In Authentication tab specify the Encryption/Auth. Key group proposal to 3DES, SHA-1 and DH2, also type the NSG public IP in Remote Gateway.
6 In IKev1 Tunnel tab (phase 2) same proposal setting as the IKev1 Gateway.
Test the Result
1 Connecting the tunnel, should pop-up the login credential.
2. In your computer, the command “ipconfig/all” and find TheGreenBow Virtual Miniport Adapter that has the IP address from NSG’s VPN subnet.
What Could Go Wrong?
1 Confirm if the subnet pool size in Remote access VPN is enough for the LAN user.
2 Disable the service of “IKE and AuthIP IPsec Keying Modules” and then try again.
- 8.5K All Categories
- 1.6K Nebula
- 71 Nebula Ideas
- 57 Nebula Status and Incidents
- 4.5K Security
- 226 Security Ideas
- 982 Switch
- 46 Switch Ideas
- 876 WirelessLAN
- 22 WLAN Ideas
- 5.1K Consumer Product
- 157 Service & License
- 280 News and Release
- 98 Success Stories
- 59 Security Advisories
- 13 Education Center
- 580 FAQ
- 263 Nebula FAQ
- 160 Security FAQ
- 76 Switch FAQ
- 74 WirelessLAN FAQ
- 7 Consumer Product FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 69 About Community
- 46 Security Highlight