Setting An Ssl Vpn Rule Tutorial - ZyXEL Communications ZYWALL USG Series Reference Manual

29.2.2 Setting an SSL VPN Rule Tutorial

Here is an example SSL VPN configuration. The SSL VPN rule defines:
• Only users using the "tester" account can use the SSL VPN.
• The ZyWALL / USG will assign an IP address from 192.168.100.1 to 192.168.100.10 (defined in
object "IP-POOL") to the computers which match the rule's criteria.
• The ZyWALL / USG will assign two DNS server settings (172.16.1.1 and 172.16.1.2 defined in
objects DNS1 and DNS2) to the computers which match the rule's criteria.
• The SSL VPN users are allowed to access the ZyWALL / USG's local network, 172.16.10.0/24
(defined in object "Network1").
First of all, configure 10.1.1.254/24 for the IP address of interface ge2 which is an external
1
interface for public SSL VPN to access. Configure 172.16.10.254/24 for the IP address of interface
ge3 which is an internal network.
Router(config)# interface ge2
Router(config-if-ge)# ip address 10.1.1.254 255.255.255.0
Router(config-if-ge)# exit
Router(config)# interface ge3
Router(config-if-ge)# ip address 172.16.10.254
Router(config-if-ge)# exit
Create four address objects for the SSL VPN DHCP pool, DNS servers and the local network for SSL
2
VPN authenticated users to access.
Router(config)# address-object IP-POOL 192.168.100.1-192.168.100.10
Router(config)# address-object DNS1 172.16.5.1
Router(config)# address-object DNS2 172.16.5.2
Router(config)# address-object NETWORK1 172.16.10.0/24
Create the SSL VPN user account named tester with password 1234.
3
Router(config)# username tester password 1234 user-type user
Create an SSL VPN rule named SSL_VPN_TEST. Enable it and apply objects you just created.
4
Router(config)# sslvpn policy SSL_VPN_TEST
Router(policy SSL_VPN_TEST)# activate
Router(policy SSL_VPN_TEST)# user tester
Router(policy SSL_VPN_TEST)# network-extension activate
Router(policy SSL_VPN_TEST)# network-extension ip-pool IP-POOL
Router(policy SSL_VPN_TEST)# network-extension 1st-dns DNS1
Router(policy SSL_VPN_TEST)# network-extension 2nd-dns DNS2
Router(policy SSL_VPN_TEST)# network-extension network NETWORK1
Router(policy SSL_VPN_TEST)# exit
ZyWALL / USG (ZLD) CLI Reference Guide
255.255.255.0
Chapter 29 SSL VPN
201