IPsec IKEv1 with user authentication
Hi Support,
I'm facing an issue with setup of an IPsec VPN on my USG20-VPN device at version 5.31
I'm using with success a IKEv1 tunnel only with the Pre-shared key authentication from SecuExtender IPsec client.
But, when I try to adding an authentication level with username+password the tunnel doesn't connect as expected. I've seen a lot of online guide about this configuration but I'm am not able to fix this issue.
The connection seems to be closed unaspectatly during the connection step.
I've attached a ZIP with the item below:
Regards,
Marco
I'm facing an issue with setup of an IPsec VPN on my USG20-VPN device at version 5.31
I'm using with success a IKEv1 tunnel only with the Pre-shared key authentication from SecuExtender IPsec client.
But, when I try to adding an authentication level with username+password the tunnel doesn't connect as expected. I've seen a lot of online guide about this configuration but I'm am not able to fix this issue.
The connection seems to be closed unaspectatly during the connection step.
I've attached a ZIP with the item below:
- screenshot of the client console
- export of the client configuration
- screenshot of the ZyWall configuration
- ZyWall logs
Regards,
Marco
0
All Replies
-
Hi @3529242
Here are some methods you can try it.
Method 1. To change the local ID to local IP and peer ID to "any" in phase1 gateway settings(as below the ). Then the SecuExtender gets the IPsec provision file and to establishes IPsec VPN again.
Method 2. To configure the IPsec VPN via the Wizard and the SecuExtender gets the IPsec provision file and to establish IPsec VPN again. Please refer to this tutorial link(Remote Access VPN Wizard for SecuExtender IPSec and Non-SecuExtender IPSec VPN Clients).
See how you've made an impact in Zyxel Community this year!
0 -
Hi @Zyxel_Jeff,
I'm trying with the wizard (available only for IKEv2) but after the VPN deployment I got an authentication error. I got the same error during my last test with IKEv2 so, seems to be an issue with and without the wizard.
In attach you can find:- screenshot of the client console
- export of the client configuration
- screenshot of the ZyWall configuration
0 -
@3529242
Could you share your device config file with us via private message? Maybe we can try to fix it in our lab environment?
See how you've made an impact in Zyxel Community this year!
0 -
0
-
See how you've made an impact in Zyxel Community this year!
0
Zyxel Employee
.Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 151 Nebula Ideas
- 98 Nebula Status and Incidents
- 5.7K Security
- 277 USG FLEX H Series
- 277 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.4K Consumer Product
- 250 Service & License
- 395 News and Release
- 85 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 75 Security Highlight
