Chapter 35 L2TP VPN
ZyWALL Series CLI Reference Guide
306
• Enable the policy route.
35.6.5 Configuring the WAN Policy Route for L2TP Example
Firmware 5.0 or later: The following commands configure the L2TP profile so that VPN clients to access
the Internet through the WAN when connected to the Zyxel Device.
• Check that the default zone VPN_To_WAN_SNAT exists.
• Add the L2TP VPN profile to the VPN_To_WAN_SNAT zone.
Router(config)# policy 3
Router(policy-route)# source LAN_SUBNET
Router(policy-route)# destination L2TP_
Router(policy-route)# service any
Router(policy-route)# next-hop tunnel
Default_L2TP_VPN_ConnectionRouter(policy-route)# no deactivate
Router(policy-route)# exit
Router(config)# show policy-route 3
index: 3
active: yes
description: WIZ_VPN
user: any
schedule: none
interface: ge1
tunnel: none
sslvpn: none
source: PC_SUBNET
destination: L2TP_
service: any
nexthop type: Tunnel
nexthop: Default_L2TP_VPN_Connection
bandwidth: 0
bandwidth priority: 0
maximize bandwidth usage: no
SNAT: none
amount of port trigger: 0
Router# show zone VPN_To_WAN_SNAT
No. Type Member
========================================================================
Router# configure terminal
Router(config)# zone VPN_To_WAN_SNAT
Router(zone)# crypto WIZ_VPN
To Next Page
Loading...
