How to configure IKEv2 with MS-CHAPv2 on ZyWALL?

Created - Updated
Serhii Boiarynov
Idea generator
Great answers
Master (Platinum)
Print Friendly and PDF
Have more questions? Submit a request

This article quickly shows how to configure IKEv2 with MS-CHAPv2 on our USG and Zywall devices.

 

1. The USG1100 must join an AD domain.

In the following example, domain name is usg.com.

1.PNG

2.PNG

 

2. Go to CONFIGURATION > System > DNS > Address/PTR Record and add a PTR record.

In this example, the IP of AD server is 10.214.48.71. 

3.PNG

3. Navigate to AAA Server > Active Directory > AD object.
Configure Domain Authentication for MSChap.

The user in this field should have “domain admin” privilege on your AD server. 
 
4.PNG
 
 
>>> IKEv2 is established with AD account successfully.
 
5.PNG
 
 
KB-00259

Articles in this section

See more
Was this article helpful?
1 out of 6 found this helpful
Share

Comments

0 comments

Please sign in to leave a comment.