ZyXEL Vantage CNM User Guide - Page 354

Chapter 13 L2TP VPN Note: Disconnect any existing L2TP VPN sessions before modifying L2TP VPN settings. The remote users must make any needed matching configuration changes and re-establish the sessions using the new settings. Figure 156 Device Operation > Device Configuration > VPN > L2TP VPN 354 The following table describes the fields in this screen. Table 139 Device Operation > Device Configuration > VPN > L2TP VPN LABEL DESCRIPTION Enable L2TP Over IPSec Use this field to turn the ZyWALL's L2TP VPN function on or off. VPN Connection Select the IPSec VPN connection the ZyWALL uses for L2TP VPN. IP Address Pool Authentication Method Note: Modifying this VPN connection (or the VPN gateway that it uses) disconnects any existing L2TP VPN sessions. Select the pool of IP addresses that the ZyWALL uses to assign to the L2TP VPN clients. Select Create Object to configure a new pool of IP addresses. Select how the ZyWALL authenticates a remote user before allowing access to the L2TP VPN tunnel. Allowed User The authentication method has the ZyWALL check a user's user name and password against the ZyWALL's local database, a remote LDAP, RADIUS, a Active Directory server, or more than one of these. The remote user must log into the ZyWALL to use the L2TP VPN tunnel. Keep Alive Timer Select a user or user group that can use the L2TP VPN tunnel. Select Create Object to configure a new user account. Otherwise, select any to allow any user with a valid account and password on the ZyWALL to log in. The ZyWALL sends a Hello message after waiting this long without receiving any traffic from the remote user. The ZyWALL disconnects the VPN tunnel if the remote user does not respond. Vantage CNM User's Guide