[NEBULA] How to configure IPsec VPN client on Nebula control center.

Zyxel_Chris

Simple, secure access anywhere

Zyxel VPN Clients offer a flexibly easy-to-use, easy-to-manage Virtual Private Network (VPN) solution that provides distributed users with secure, speed and reliable remote access back to corporate resources

1). Click into the new UI and go to Configure>Security gateway>Remote access VPN, specify the Client VPN server as IPSec client, if your NSG is located be hind the NAT gateway, you will need to type NAT traversal.

2). Create VPN client in Organization>Cloud authentication if your auth. type is Nebula Cloud Authentication. You can download the IPSecVPN client.

3). In the Zyxel client VPN setting please create NEW VPN Connection in IKEv1.

4). Enable Mode Config and X-Auth Popup in IKEv1 Gateway.

5). Specify the Encryption/Auth. Key group proposal to AES256, SHA-256 and DH14, also type the NSG IP.

Also the pre-share key which is same as in NCC setting in secret column.

6). Same proposal setting in IKEv1 Tunnel.

7). Change the subnet mask to 0.0.0.0 which means use the full tunnel mode, the client's traffic will redirect to the tunnel.

8). Connect the tunnel, will pop-up the login credential.

9). In your computer can use CLI ipconfig/all and find TheGreenBow Virtual Miniport Adapter has get the IP from NSG.