USG 110 / VPN Configuration Provisioning not working

mrwee
mrwee Posts: 40
First Comment Friend Collector Fifth Anniversary
 Freshman Member
edited March 27 in Security

Hi,

I'm trying to get this to work on a USG110. Setting up an IKEv2 tunnel works fine, but the Configuration Provisioning does not.

I've configured the port for e.g. 448 or 4433 and configured a matching Security Policy allowing these ports to go to ZyWall itself.

But it doesn't work. on an iPhone, using Safari the page is blank, same device with Firefox (just to test), I get

"Forbidden", "You don't have permission to access this resource". The 'www setup" is set to use other ports than those I've tested with.

The log shows the traffic flowing fine to the USG ("ACCESS FORWARD")

What am I doing wrong?

Accepted Solution

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 861
    50 Answers 500 Comments Friend Collector Second Anniversary
     Zyxel Employee
    edited June 29 Answer ✓

    Hi @mrwee

    Currently, this VPN Provision Port feature is used for IPsec VPN client only, as below:

    VPN provision get.png
    VPN IPsec client provision.png

    If the iPhone's Safari browser needs to download the VPN Provision file still needs to use the Web-GUI access port.

All Replies

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 861
    50 Answers 500 Comments Friend Collector Second Anniversary
     Zyxel Employee
    edited March 29

    Hi @mrwee

    Thank you for your inquiry. Could you please provide us with the remote Web-GUI link and device config file via private message for further checks? We would like to review your current device settings directly. We will send you a private message shortly, please check your email inbox.

    Thank you.

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 861
    50 Answers 500 Comments Friend Collector Second Anniversary
     Zyxel Employee
    edited March 29

    Hi @mrwee

    Additionally, please check whether the configuration provisioning has been activated, as below:

    IPsec Provisioning_edit.png

    Thanks.

  • mrwee
    mrwee Posts: 40
    First Comment Friend Collector Fifth Anniversary
     Freshman Member

    Configuration Provisioning has been activated, but I've only enabled IKEv2, not L2TP.

    image.png

  • mrwee
    mrwee Posts: 40
    First Comment Friend Collector Fifth Anniversary
     Freshman Member

    Hi Jeff,

    Thank you for the info. Since USG110 is out-of-service my assumption is that it will not be "fixed".

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）