ZyWALL Series CLI Reference Guide
299
CHAPTER 35
L2TP VPN
This chapter explains how to set up and maintain L2TP VPNs in the Zyxel Device.
35.1 L2TP VPN Overview
L2TP VPN lets remote users use the L2TP and IPSec client software included with their computers’
operating systems to securely connect to the network behind the Zyxel Device. The remote users do not
need their own IPSec gateways or VPN client software.
Figure 28 L2TP VPN Overview
The Layer 2 Tunneling Protocol (L2TP) works at layer 2 (the data link layer) to tunnel network traffic
between two peers over another network (like the Internet). In L2TP VPN, an IPSec VPN tunnel is
established first (see Chapter 33 on page 276 for information on IPSec) and then an L2TP tunnel is built
inside it.
Note: At the time of writing the L2TP remote user must have a public IP address in order for
L2TP VPN to work (the remote user cannot be behind a NAT router or a firewall).
35.2 IPSec Configuration
You must configure an IPSec VPN connection for L2TP VPN to use (see Chapter 33 on page 276 for
details). The IPSec VPN connection must:
• Be enabled.
• Use transport mode.
• Not be a manual key VPN connection.
• Use Pre-Shared Key authentication.
To Next Page
Loading...
