beautypg.com

4 login screen – ZyXEL Communications ZyXEL ZyWALL 2WG User Manual

Page 389

background image

Chapter 22 Remote Management

ZyWALL 2WG User’s Guide

389

• The actual IP address of the HTTPS server (the IP address of the ZyWALL’s port that you

are trying to access) does not match the common name specified in the ZyWALL’s
HTTPS server certificate that your browser received. Do the following to check the
common name specified in the certificate that your ZyWALL sends to HTTPS clients.

2a Click REMOTE MGMT. Write down the name of the certificate displayed in the

Server Certificate field.

2b Click CERTIFICATES. Find the certificate and check its Subject column. CN

stands for certificate’s common name (see

Figure 224 on page 390

for an example).

Use this procedure to have the ZyWALL use a certificate with a common name that matches
the ZyWALL’s actual IP address. You cannot use this procedure if you need to access the
WAN port and it uses a dynamically assigned IP address.

2a Create a new certificate for the ZyWALL that uses the IP address (of the

ZyWALL’s port that you are trying to access) as the certificate’s common name.
For example, to use HTTPS to access a LAN port with IP address 192.168.1.1,
create a certificate that uses 192.168.1.1 as the common name.

2b Go to the remote management WWW screen and select the newly created certificate

in the Server Certificate field. Click Apply.

22.4.4 Login Screen

After you accept the certificate, the ZyWALL login screen appears. The lock displayed in the
bottom right of the browser status bar denotes a secure connection.

Figure 222 Example: Lock Denoting a Secure Connection

Click Login and you then see the next screen.
The factory default certificate is a common default certificate for all ZyWALL models.