The SonicWALL security appliance can terminate L2TP-over-IPsec connections from incoming Microsoft Windows 2000 and Windows XP clients. In situations where running the SonicWALL Global VPN Client is not possible, you can use the SonicWALL L2TP Server to provide secure access to resources behind the SonicWALL security appliances.
You can use Layer 2 Tunneling Protocol (L2TP) to create VPN over public networks such as the Internet. L2TP provides interoperability between different VPN vendors that protocols such as PPTP and L2F do not, although L2TP combines the best of both protocols and is an extension of them. L2TP is supported on Microsoft Windows 2000 Operating System.
L2TP supports several of the authentication options supported by PPP, including Password Authentication Protocol (PAP), Challenge Handshake Authentication Protocol (CHAP), and Microsoft Challenge Handshake Authentication Protocol (MS-CHAP). You can use L2TP to authenticate the endpoints of a VPN tunnel to provide additional security, and you can implement it with IPsec to provide a secure, encrypted VPN solution.
|
Note
|
For more complete information on configuring the L2TP Server, see the technote
Configuring the L2TP Server in SonicOS
located on the SonicWALL documentation site:
http://www.sonicwall.com/us/Support.html . |
The VPN > L2TP Server page provides the settings for configuring the SonicWALL security appliance as a LT2P Server.
To configure the L2TP Server, follow these steps:
|
1.
|
To enable L2TP Server functionality on the SonicWALL security appliance, select
Enable
L2TP Server
. Then click Configure
to display the L2TP Server Configuration
window.
|
|
2.
|
Enter the number of seconds in the
Keep alive time (secs)
field to send special packets to keep the connection open. The default is 60
seconds.
|
|
3.
|
Enter the IP address of your first DNS server in the
DNS Server 1
field. If you have a second DNS server, type the IP address in the DNS Server 2
field.
|
|
4.
|
Enter the IP address of your first WINS server in the
WINS Server 1
field. If you have a second WINS server, type the IP address in the WINS Server 2
field.
|
|
5.
|
Select
IP address provided by RADIUS Server
if a RADIUS Server provides IP addressing information to the L2TP clients.
|
|
6.
|
If the L2TP Server provides IP addresses, select
Use the Local L2TP IP
pool. Enter the range of private IP addresses in the Start IP
and End IP
fields. The private IP addresses should be a range of IP addresses on the LAN.
|
|
7.
|
If you have configured a specific user group defined for using L2TP, select it from the
User
Group for L2TP users
menu or use Everyone
.
|
|
8.
|
Click
OK
.
|
|
•
|
User Name
- The user name assigned in the local user database or the RADIUS user database.
|
|
•
|
PPP IP
- The source IP address of the connection.
|
|
•
|
Zone
- The zone used by the LT2P client.
|
|
•
|
Interface
- The interface used to access the L2TP Server, whether it is a VPN client or another SonicWALL security appliance.
|
|
•
|
Authentication
- Type of authentication used by the L2TP client.
|
|
•
|
Host Name
- The name of the L2Tp client connecting to the L2TP Server.
|