Virtual Private Networks (VPN) L2TP
IX30 User Guide
447
3. Set the zone to internal:
(config network interface gre_interface2)> zone internal
(config network interface gre_interface2)>
4. Set the device to the GRE tunnel created in Task three (/vpn/iptunnel/gre_tunnel2):
(config network interface gre_interface2)> device /vpn/iptunnel/gre_
tunnel2
(config network interface gre_interface2)>
5. Set 172.31.0.2/30 as the virtual IP address on the GRE tunnel:
(config network interface gre_interface2)> ipv4 address 172.31.0.2/30
(config network interface gre_interface2)>
6. Save the configuration and apply the change:
(config network interface gre_interface2)> save
Configuration saved.
>
7. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.
L2TP
Your IX30 device supports PPP-over-L2TP (Layer 2 Tunneling Protocol).
Configure a PPP-over-L2TP tunnel
Your IX30 device supports PPP-over-L2TP (Layer 2 Tunneling Protocol). The tunnel endpoints are
known as L2TP Access Concentrators (LAC) and L2TP Network Servers (LNS). Each endpoint
terminates the PPP session.
Required configuration items
n
For L2TP access concentrators:
l
The hostname or IP address of the L2TP network server.
l
The firewall zone for the tunnel.
n
For L2TP network servers:
l
The IP address of the L2TP access concentrator.
l
The local IP address assigned to the L2TP virtual network interface.
l
The IP address assigned to the remote peer.
l
The firewall zone for the tunnel.
Additional configuration items
n
The UDP port that L2TP servers will listen on, if other than the deafult of 1701.
n
Access control for the L2TPtunnel.