ZyXEL Communications UAG Series User Manual page 187

First of all, configure 10.1.1.254/24 for the IP address of interface wan1 which is an external
1
interface for public SSL VPN to access. Configure 172.16.10.254/24 for the IP address of interface
lan2 which is an internal network.
Router(config)# interface wan1
Router(config-if-ge)# ip address 10.1.1.254 255.255.255.0
Router(config-if-ge)# exit
Router(config)# interface lan2
Router(config-if-ge)# ip address 172.16.10.254
Router(config-if-ge)# exit
Create four address objects for the SSL VPN DHCP pool, DNS servers and the local network for SSL
2
VPN authenticated users to access.
Router(config)# address-object IP-POOL 192.168.100.1-192.168.100.10
Router(config)# address-object DNS1 172.16.5.1
Router(config)# address-object DNS2 172.16.5.2
Router(config)# address-object NETWORK1 172.16.10.0/24
Create an endpoint security profile named EPS-1. SSL VPN users' computers must install Windows
3
XP and TrendMicro PC-Cillin Internet Security 2007. Besides, the PC-Cillin anti-virus must be
activated.
Router(config)# eps profile EPS-1
Router(eps EPS-1)# matching-criteria all
Router(eps EPS-1)# os-type windows
Router(eps EPS-1)# windows-version windows-xp
Router(eps EPS-1)# anti-virus activate
Router(eps EPS-1)# anti-virus TrendMicro_PC-Cillin_Internet_Security_2007 detect-
auto-protection enable
Router(eps EPS-1)# exit
Create the SSL VPN user account named tester with password 1234.
4
Router(config)# username tester password 1234 user-type user
Create an SSL VPN rule named SSL_VPN_TEST. Enable it and apply objects you just created.
5
Router(config)# sslvpn policy SSL_VPN_TEST
Router(policy SSL_VPN_TEST)# activate
Router(policy SSL_VPN_TEST)# user tester
Router(policy SSL_VPN_TEST)# network-extension activate
Router(policy SSL_VPN_TEST)# network-extension ip-pool IP-POOL
Router(policy SSL_VPN_TEST)# network-extension 1st-dns DNS1
Router(policy SSL_VPN_TEST)# network-extension 2nd-dns DNS2
Router(policy SSL_VPN_TEST)# network-extension network NETWORK1
Router(policy SSL_VPN_TEST)# eps activate
Router(policy SSL_VPN_TEST)# eps 1 EPS-1
Router(policy SSL_VPN_TEST)# exit
UAG CLI Reference Guide
255.255.255.0
Chapter 35 SSL VPN
187