ZyXEL Communications ZyWALL 310 - Page 287

Chapter 33 IPSec VPN
ZyWALL Series CLI Reference Guide
287
vpn-configuration-provision port
<1...65535>
Sets a new port between 1024 to 65535 that is not in use by other
services.
This change the default port that IPSec VPN clients use to retrieve
VPN rule settings from the Zyxel Device. The default is 443 which is
already in use for remote management by default. If you change
the default IPSec VPN port on the Zyxel Device, make sure to make
the same change to the Zyxel IPSec VPN client.
no vpn-configuration-provision
port
Sets the VPN configuration provisioning port back to default.
show vpn-configuration-provision
port
Displays the current VPN configuration provisioning port.
vpn-configuration-provision
authentication auth_method
Sets the authentication method the VPN configuration provisioning
service uses to authenticate users.
show vpn-configuration-provision
activation
Displays whether or not the VPN configuration provisioning service is
activated.
show vpn-configuration-provision
authentication
Displays the authentication method the VPN configuration
provisioning service uses to authenticate users.
show vpn-configuration-provision
rules
Displays the settings of the configured VPN configuration
provisioning rules.
show vcp allowed users
Displays available users who can be configured as allowed users
(using user username) of a VPN Configuration Provision (VCP) rule.
show vcp allowed crypto map
Displays IPv4 VPN Connection rules which can be used in a VPN
Configuration Provision (VCP) rule. Nothing displays if no suitable
rules are available.
show vcp allowed crypto map6
Displays IPv6 VPN Connection rules which can be used in a VPN
Configuration Provision (VCP) rule. Nothing displays if no suitable
rules are available.
[no] vpn-configuration-provision
iosfilter
Enables over-the-air VPN provisioning for mobile Apple (iOS)
devices.
The Apple (iOS) user must log into the Zyxel Device web
configurator using a Safari browser to be authenticated. The user
can then set up a VPN connection by visiting a link in the Safari
browser to install an XML VPN configuration file. The VPN rule for the
Apple (iOS) device must be configured first. Each VPN rule must
have a separate link. Types of VPN supported are:
•L2TP
• IKEv1 Cisco VPN
• IKEv2 (for iOS 9.3 and later)
The no command disables over-the-air VPN provisioning for mobile
Apple (iOS) devices using a Safari browser.
Table 151 vpn-configuration-provision Commands: VPN Configuration Provisioning
COMMAND DESCRIPTION