Example: L2Tp And Zywall/Usg Behind A Nat Router - ZyXEL Communications ZyWALL 110 User Manual

Table 180 Configuration > VPN > L2TP VPN (continued)
LABEL
Allowed User
Keep Alive Timer
First DNS Server,
Second DNS
Server
First WINS Server,
Second WINS
Server
Apply
Reset

26.2.1 Example: L2TP and ZyWALL/USG Behind a NAT Router

If the ZyWALL/USG (Z) is behind a NAT router (N), then do the following for remote clients (C) to
access the network behind the ZyWALL/USG (Z) using L2TP over IPv4.
Create an address object in Configuration > Object > Address for the WAN IP address of the
1
NAT router.
Go to Configuration > VPN > IPSec VPN > VPN Connection and click Add for IPv4
2
Configuration to create a new VPN connection.
Select Remote Access (Server Role) as the VPN scenario for the remote client.
3
Chapter 26 L2TP VPN
DESCRIPTION
The remote user must log into the ZyWALL/USG to use the L2TP VPN tunnel.
Select a user or user group that can use the L2TP VPN tunnel. Use Create new Object if
you need to configure a new user account. Otherwise, select any to allow any user with a
valid account and password on the ZyWALL/USG to log in.
The ZyWALL/USG sends a Hello message after waiting this long without receiving any
traffic from the remote user. The ZyWALL/USG disconnects the VPN tunnel if the remote
user does not respond.
Specify the IP addresses of DNS servers to assign to the remote users. You can specify
these IP addresses two ways.
Custom Defined - enter a static IP address.
From ISP - use the IP address of a DNS server that another interface received from its
DHCP server.
The WINS (Windows Internet Naming Service) server keeps a mapping table of the
computer names on your network and the IP addresses that they are currently using.
Type the IP addresses of up to two WINS servers to assign to the remote users. You can
specify these IP addresses two ways.
Click Apply to save your changes in the ZyWALL/USG.
Click Reset to return the screen to its last-saved settings.
ZyWALL/USG Series User's Guide
451