USGFLEX100H 2FA OpenVPN

Options
andrealemmi
andrealemmi Posts: 12 image  Freshman Member
First Comment Seventh Anniversary Nebula Gratitude
in USG FLEX H Series

Good evening,is 2 factor authentication supported on a usgflex100h using vpnssl via openssl (via email or google authenticator)? If I configure client access on the vpnssl as a split tunnel for a subnet, the remote client is unable to navigate, do I need to create policy routes on the firewall?

Thank you.

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,594 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options

    Hi @andrealemmi ,

    To better assist you, please clarify the below items:

    is 2 factor authentication supported on a usgflex100h using vpnssl via openssl (via email or google authenticator)

    I notice you mentioned OpenVPN in the title but OpenSSL in the content. Could you clarify which one you are trying to use?

     If I configure client access on the vpnssl as a split tunnel for a subnet, the remote client is unable to navigate, do I need to create policy routes on the firewall?

    Could you provide more details about your configuration and the symptoms you're experiencing?

    Zyxel_Judy

  • PeterUK
    PeterUK Posts: 4,564 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    So you need to allow from SSL zone to Zywall and the IP of 2FA is the LAN gateway IP of the split tunnel subnet.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）