ZyXEL Communications ZyWALL 310 - 34.2.2 Setting an SSL VPN Rule Tutorial

Chapter 34 SSL VPN
ZyWALL Series CLI Reference Guide
297
34.2.2 Setting an SSL VPN Rule Tutorial
Here is an example SSL VPN configuration. The SSL VPN rule defines:
• Only users using the “tester” account can use the SSL VPN.
• The Zyxel Device will assign an IP address from 192.168.100.1 to 192.168.100.10 (defined in object “IP-
”) to the computers which match the rule’s criteria.
• The Zyxel Device will assign two DNS server settings (172.16.1.1 and 172.16.1.2 defined in objects DNS1
and DNS2) to the computers which match the rule’s criteria.
• The SSL VPN users are allowed to access the Zyxel Device’s local network, 172.16.10.0/24 (defined in
object “Network1”).
1 First of all, configure 10.1.1.254/24 for the IP address of interface ge2 which is an external interface for
public SSL VPN to access. Configure 172.16.10.254/24 for the IP address of interface ge3 which is an
internal network.
2 Create four address objects for the SSL VPN DHCP , DNS servers and the local network for SSL VPN
authenticated users to access.
3 Create the SSL VPN user account named tester with password 1234.
[no] user user_name
Specifies the user or user group that can use the SSL VPN access
policy.
sslvpn policy move <1..16> to
<1..16>
Moves the specified SSL VPN access policy to the number that you
specified.
sslvpn no connection username
user_name
Terminates the user’s SSL VPN connection and deletes corresponding
session information from the Zyxel Device.
no sslvpn policy profile_name
Deletes the specified SSL VPN access policy.
sslvpn policy rename
profile_name profile_name
Renames the specified SSL VPN access policy.
show workspace application
Displays the SSLVPN resources available to each user when logged
into SSLVPN.
show workspace cifs
Displays the shared folders available to each user when logged into
SSLVPN.
Table 158 SSL VPN Commands
COMMAND DESCRIPTION
Router(config)# interface ge2
Router(config-if-ge)# ip address 10.1.1.254 255.255.255.0
Router(config-if-ge)# exit
Router(config)# interface ge3
Router(config-if-ge)# ip address 172.16.10.254 255.255.255.0
Router(config-if-ge)# exit
Router(config)# address-object IP- 192.168.100.1-192.168.100.10
Router(config)# address-object DNS1 172.16.5.1
Router(config)# address-object DNS2 172.16.5.2
Router(config)# address-object NETWORK1 172.16.10.0/24
Router(config)# username tester password 1234 user-type user