Diagnostic Tools - ZyXEL Communications ZyWALL 1050 Release Note

www.zyxel.com
L2TP over IPSec:
1. [SPR: none]
[Symptom] If user upgrades to firmware version 2.00 from 1.0x, he may need to copy and
paste the following configuration in CLI mode to build the required IPSec tunnel for L2TP
connections. Please refer to user guide for more details about how to configure L2TP over
IPSec.
!
enable
!
configure terminal
!
isakmp policy Default_L2TP_VPN_GW
mode main
transform-set 3des-sha 3des-md5 des-sha
lifetime 86400
local-ip interface ge2
peer-ip 0.0.0.0 0.0.0.0
authentication pre-share
keystring 12345678
local-id type ip 0.0.0.0
peer-id type any
xauth type server default deactivate
group2
deactivate
exit
!
crypto map Default_L2TP_VPN_Connection
ipsec-isakmp Default_L2TP_VPN_GW
encapsulation transport
transform-set esp-3des-sha esp-3des-md5 esp-des-sha
set security-association lifetime seconds 86400
set pfs none
deactivate
exit
!
write
!

Diagnostic Tools:

1. [SPR: 060823385]
[Symptom] When user downloads a diagnostic report, the default downloaded filename would
have extra square bracket. For example diaginfo-xxx[1].tar.bz2.
User-Aware Features:
1. [SPR: 060208177]
[Symptom] In some occasions, Outlook Express might be terminated if both ZW1050 force
authentication and https force redirect features are enabled and access user does not login to
ZyWALL first.
[Work around] The access user must be authenticated first
2. [SPR: 070202236]
[Symptom] An access user could gain access right after signing in ZyWALL (if properly
configured) and log out when he don't need to access the network resources anymore. But
sometimes user stays in signing in state after he closes the access window directly and the
resources could still be accessible.
[Work around] For access users, user logout button to logout instead of closing window
directly. For administrations, enable user lease/idle detection for access users.
7/142