Virtual PrivateNetworks(VPN) L2TP
IX20 User Guide
618
n
To limit access to hosts connected through a specified interface on the IX20 device:
a. Click Interfaces.
b. For Add Interface, click .
c. For Interface, select the appropriate interface from the dropdown.
d. Click again to allow accessthrough additional interfaces.
n
To limit access based on firewall zones:
a. Click Zones.
b. For Add Zone, click .
c. For Zone, select the appropriate firewall zonefrom the dropdown.
See Firewall configuration for information about firewall zones.
d. Click again to allow accessthrough additional firewall zones.
6. To add an L2TPaccessconcentrator:
a. Click to expand L2TP access concentrators.
b. For Add L2TP access concentrator, type a name for the LACand click .
c. LACsare enabled by default. To disable, toggle off Enable.
d. For L2TP network server, type the hostname or IPaddressof the L2TPnetwork server.
e. (Optional) Type the L2TP network server port to use to connect to the server, if other
than the default of 1701.
f. (Optional) Type the Username to use to log into the server.
g. (Optional) Type the Password to use to log into the server.
h. (Optional) Type the Metricfor the tunnel, if other than the default of 1.
i. Select a firewall Zone for the tunnel. This is used by packet filtering rulesand access
control liststo restrict network traffic on the tunnel.
j. (Optional): Custom PPPconfiguration:
i. Enable custom PPPconfiguration.
ii. Enable Override if the custom configuration should override the default configuration
and only use the custom options.
iii. For Configuration file, paste or type the configuration data in the format of a pppd
optionsfile.
7. To add an L2TPnetwork server:
a. Click to expand L2TP network servers.
b. For Add L2TP network server, type a name for the LNSand click .
c. LNSsare enabled by default. To disable, toggle off Enable.
d. For L2TP access concentrator, type the IPaddressof the L2TPaccess concentrator that
this server will allow connectionsfrom. This can also be:
n
Arange of IPaddresses, using the format x.x.x.x-y.y.y.y, for example 192.168.188.1-
192.168.188.254.
n
The keyword any, which means that the server will accept connectionsfrom any IP
address.
e. For Local IP address, typethe IPaddress of the L2TPvirtual network interface.
f. For Remote IP address, type the IPaddress to assign to the remote peer.
To Next Page
Loading...
Need help?
General