Configure Security Policies For The Vpn Tunnel; How To Configure User-Aware Access Control; Set Up User Accounts; Table 30 User-Aware Access Control Example - ZyXEL Communications ZyWALL USG 300 User Manual

Unified security gateway

Hide thumbs Also See for ZyWALL USG 300:

Table of Contents

Chapter 6 Tutorials

6.3.4 Configure Security Policies for the VPN Tunnel

You configure security policies based on zones. Assign the new VPN connection to a zone to

be able to apply security policies (firewall rules, IDP, and so on) to the VPN connection. Make

sure all firewalls between the ZyWALL and remote IPSec router allow UDP port 500 (IKE)

and IP protocol 50 (AH) or 51 (ESP). If you enable NAT traversal, all firewalls between the

ZyWALL and remote IPSec router should also allow UDP port 4500.

You can configure many policies and security settings for specific users or groups of users.

This is illustrated in the following example, where you will set up the following policies. This

is a simple example that does not include priorities for different types of traffic. See

Bandwidth Management on page 424

GROUP (USER)

Finance (Leo)

Engineer (Steven) Yes

Sales (Debbie)

Guest (guest)

The users are authenticated by an external RADIUS server at 192.168.1.200.

First, set up the user accounts and user groups in the ZyWALL. Then, set up user

authentication using the RADIUS server. Finally, set up the policies in the table above.

The ZyWALL has its default settings.

Set up one user account for each user account in the RADIUS server. If it is possible to export

user names from the RADIUS server to a text file, then you might create a script to create the

user accounts instead. This example uses the Web Configurator.

1 Click Object > User/Group > User. Click the Add icon.

2 Enter the same user name that is used in the RADIUS server, and set the User Type to

Ext-User because this user account is authenticated by an external server. Click OK.

for more on bandwidth management.

Yes (M-F, 08:30~18:00)

ZyWALL USG 300 User's Guide