NAT - Secondary RDP Port - AzureAD vs Local logins
Options
JeremyHowes
Posts: 2
in Security
Using USG210-4.65(AAPI.0)
Trying to configure NAT for a secondary RDP connection port. Having issues connection to a AZUREAD account and not local account. Internal LAN RDP works just fine on with both a local and AZUREAD accounts. But I can't get both to work through NAT. The local account will connect and login in. The AZUREAD account will connect but login fails. Any Ideas?
Trying to configure NAT for a secondary RDP connection port. Having issues connection to a AZUREAD account and not local account. Internal LAN RDP works just fine on with both a local and AZUREAD accounts. But I can't get both to work through NAT. The local account will connect and login in. The AZUREAD account will connect but login fails. Any Ideas?
0
All Replies
-
Do you authenticated account by LDAPs? Zyxel device doesn't support SAML( Azure AD) but support LDAPs(Azure AD DS), so that need to use Azure AD DS integrate with Azure AD.
I am not sure do you mean you NAT to internal Server with RDP service, and login fail if authenticated by AZUREAD account?
The "Local account" do you mean it's from local AD?
Regarding to Azure AD, you can reference this example
https://community.zyxel.com/en/discussion/10030/use-azure-active-directory-to-authenicated-vpn-access
0 -
Thanks Jeremy for the feedback. We only use AzureAD as we have no local servers. When I say local user, its the local account on the PC we are try to connect to. I upgraded to 4.65, because the security advisory from Zyxel.0
-
@JeremyHowes
Can you collect the packet on wan, and Lan which PC located, and set AD's IP as Host IP during reproducing issue then private message the packet to me for investigation.
EX:
0
Categories
- All Categories
- 395 Beta Program
- 2.1K Nebula
- 116 Nebula Ideas
- 78 Nebula Status and Incidents
- 5.1K Security
- 51 USG FLEX H Series
- 247 Security Ideas
- 1.3K Switch
- 70 Switch Ideas
- 907 WirelessLAN
- 34 WLAN Ideas
- 5.9K Consumer Product
- 210 Service & License
- 332 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.9K FAQ
- 880 Nebula FAQ
- 415 Security FAQ
- 221 Switch FAQ
- 195 WirelessLAN FAQ
- 46 Consumer Product FAQ
- 137 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 72 About Community
- 63 Security Highlight