L2Tp Vpn Example - ZyXEL Communications 1050 Cli Reference Manual

Chapter 17 L2TP VPN
Table 60 L2TP VPN Commands
COMMAND
[no] l2tp-over-ipsec
keepalive-timer <1..180>
[no] l2tp-over-ipsec first-
dns-server {ip |
interface_name} {1st-
dns|2nd-dns|3rd-dns}|
{ppp_interface|aux}{1st-
dns|2nd-dns}}
[no] l2tp-over-ipsec second-
dns-server {ip |
interface_name} {1st-
dns|2nd-dns|3rd-dns}|
{ppp_interface|aux}{1st-
dns|2nd-dns}}
[no] l2tp-over-ipsec first-
wins-server ip
[no] l2tp-over-ipsec second-
wins-server ip
no l2tp-over-ipsec session
tunnel-id <0..65535>
show l2tp-over-ipsec
show l2tp-over-ipsec session

17.5 L2TP VPN Example

This example uses the following settings in creating a basic L2TP VPN tunnel. See the Web
Configurator User's Guide for how to configure L2TP in remote user computers using
Windows XP and Windows 2000.
Figure 21 L2TP VPN Example
LAN_SUBNET: 192.168.1.1/24
• The ZyWALL has a static IP address of 172.23.37.205 for the ge3 interface.
• The remote user has a dynamic public IP address and connects through the Internet.
• You configure an IP address pool object named L2TP_POOL to assign the remote users
IP addresses from 192.168.10.10 to 192.168.10.20 for use in the L2TP VPN tunnel.
114
DESCRIPTION
The ZyWALL sends a Hello message after waiting this long without
receiving any traffic from the remote user. The ZyWALL disconnects the
VPN tunnel if the remote user does not respond. The no command returns
the default setting.
Specifies the first DNS server IP address to assign to the remote users. You
can specify a static IP address, or a DNS server that an interface received
from its DHCP server. The no command removes the setting.
Specifies the second DNS server IP address to assign to the remote users.
You can specify a static IP address, or a DNS server that an interface
received from its DHCP server. The no command removes the setting.
Specifies the first WINS server IP address to assign to the remote users.
The no command removes the setting.
Specifies the second WINS server IP address to assign to the remote users.
The no command removes the setting.
Deletes the specified L2TP VPN tunnel.
Displays the L2TP VPN settings.
Displays current L2TP VPN sessions.
172.23.37.205
L2TP_POOL:
192.168.10.10~192.168.10.20
ZyWALL (ZLD) CLI Reference Guide