IKE VPN Certificate renewal on a USG 210

DaviD42
DaviD42 Posts: 7  Freshman Member
First Comment First Anniversary
in Security

Hi,

Hopefully someone can help with this.

I have an IKEv2 remote access VPN setup using a certificate created using the Zyxel. It works fine at the moment but when I replace the certificate it stopped working.

I created a new certificate using the Zyxel with the same settings as the previous one. Added it to my computers Trusted Certificates. I then change to the new certificate in the IKE VPNs gateway settings. it then fails to authenticate.

have I missed something? I haven't been able to reboot the Zyxel, will it only set after a reboot?

Thanks


David

All Replies

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,396  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @DaviD42,

    Which IKEv2 client are you using? Zyxel IPSec VPN client or native Windows client?

  • DaviD42
    DaviD42 Posts: 7  Freshman Member
    First Comment First Anniversary

    Native Windows.

    Thanks

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,396  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @DaviD42,

    In the VPN gateway, select the new created certificate.

    Export the certificate without password and import it to the laptop.

    image.png

  • DaviD42
    DaviD42 Posts: 7  Freshman Member
    First Comment First Anniversary

    Thanks,

    Thats what I tried. Exported no password, imported to Trusted Certificates in windows. changed the certificate in the VPN Gateway.

    But it then stops working. If i change the certificate back it works fine again.

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,396  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @DaviD42,

    Please send the remote access information of your USG210 to me in private message. I'll check the configuration and establish IKEv2 to your USG210 to check the symptom. Thanks!

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）