Configuring L2Tp; Configuring The Fortigate Unit As An L2Tp Gateway - Fortinet FortiGate 50A Installation And Configuration Manual

PPTP and L2TP VPN

Configuring L2TP

Configuring the FortiGate unit as an L2TP gateway

FortiGate-50A Installation and Configuration Guide
Some implementations of L2TP support elements of IPSec. These elements must be
disabled when L2TP is used with a FortiGate unit.
Note: L2TP VPNs are only supported in NAT/Route mode.
This section describes:
• Configuring the FortiGate unit as an L2TP gateway
• Configuring a Windows 2000 client for L2TP
• Configuring a Windows XP client for L2TP
Use the following procedures to configure the FortiGate unit as an L2TP gateway:
To add users and user groups
Add a user for each L2TP client.
1 Go to User > Local.
2 Add and configure L2TP users.
See "Adding user names and configuring authentication" on page
3 Go to User > User Group.
4 Add and configure L2TP user groups.
See "Configuring user groups" on page
To enable L2TP and specify an address range
1 Go to VPN > L2TP > L2TP Range.
2 Select Enable L2TP.
3 Enter the Starting IP and the Ending IP for the L2TP address range.
4 Select the User Group that you added in
5 Select Apply to enable L2TP through the FortiGate unit.
177.
"To add users and user groups" on page
Configuring L2TP
172.
209.
209