Set up IKEv2 VPN for a Zyxel USG Flex Firewall

In this guide, we take you through the ins and outs of configuring IKEv2 VPN for a Zyxel USG Flex firewall, plus how to set up secure remote access in VPN Tracker for Mac, iPhone and iPad.

Create a new IKEv2 tunnel for Zyxel USG Flex

Setting up VPN on your Zyxel USG Flex device is easy, thanks to the step-by-step wizard. To access the wizard, log in to the user interface of your USG Flex and click on the magic wand icon:

Click the magic wand icon to access the wizard

You will now see the Quick Setup window. Choose Remote Access VPN Setup to start setting up VPN:

Open the Remote Access setup for VPN

For scenario, choose IKEv2 IPSec Client:

You now have the option to choose your network traffic configuration. As a default, the USG Flex will tunnel all internet traffic through the VPN (full tunnel / host-to-everywhere.) For faster performance and better compatibility with local network resources, use split tunnelling to specify exactly which networks are to be used with the VPN tunnel.

To enable split tunnelling, check the box next to Split Tunnel and choose your LAN network from the dropdown:

Choose Split Tunnel for more efficient VPN

Next, go to IP Address Pool. Choose Custom to specify the remote network you are connecting to via the VPN:

Enter the remote network range for the VPN

Important: The network range you enter here needs to lie outside of your LAN network, otherwise the connection will not work.

In this step, you also have the option to specify DNS (Domain Name Server) settings for the VPN. Remember the DNS settings you select will have to be entered into the VPN client later.

Once you have configured your network settings, you can start adding VPN users. Click to add a new user, then fill out the fields as prompted:

Click to add a new VPN user

Fill out the user information

Once a new contact has been added to your available users, click the right-pointing arrow to move them to the member list for the new VPN connection:

The new user will appear under "available users"

Click to move the new user to the member list for the connection

Finally, you will be shown a summary of your new connection details. If you are happy with the setup, click Save to exit the wizard:

Check over your connection details and save

Connect to Zyxel USG Flex VPN on Mac & iOS

In order to connect to your new Zyxel IKEv2 VPN tunnel, you will need a VPN client. VPN Tracker is the leading VPN client for macOS and iOS, so you can get secure remote access on all your devices.

The VPN Tracker setup wizard for Zyxel USG Flex enables you to get connected to your VPN in seconds. Simply enter your gateway's IP address, login with your user credentials and go!

Follow the steps in the wizard to set up your Zyxel IKEv2 connection