ZyXEL Communications ZyWALL USG 300 User Manual page 552

Chapter 31 L2TP VPN
Table 142 Configuration > VPN > IPSec VPN > VPN Connection (continued)
LABEL
VPN Connection
IP Address Pool
Authentication
Method
Allowed User
Keep Alive
Timer
First DNS Server
Second DNS
Server
First WINS
Server, Second
WINS Server
Apply
Reset
552
DESCRIPTION
Select the IPSec VPN connection the ZyWALL uses for L2TP VPN. All of
the configured VPN connections display here, but the one you use must
meet the requirements listed in
VPN on page 549.
Note: Modifying this VPN connection (or the VPN gateway that it
uses) disconnects any existing L2TP VPN sessions.
Select the pool of IP addresses that the ZyWALL uses to assign to the
L2TP VPN clients. Use Create new Object if you need to configure a
new pool of IP addresses.
Select how the ZyWALL authenticates a remote user before allowing
access to the L2TP VPN tunnel.
The authentication method has the ZyWALL check a user's user name
and password against the ZyWALL's local database, a remote LDAP,
RADIUS, a Active Directory server, or more than one of these. See
Chapter 45 on page 767
objects.
The remote user must log into the ZyWALL to use the L2TP VPN tunnel.
Select a user or user group that can use the L2TP VPN tunnel. Use
Create new Object if you need to configure a new user account (see
Section 40.2.1 on page 726
any user with a valid account and password on the ZyWALL to log in.
The ZyWALL sends a Hello message after waiting this long without
receiving any traffic from the remote user. The ZyWALL disconnects the
VPN tunnel if the remote user does not respond.
Specify the IP addresses of DNS servers to assign to the remote users.
You can specify these IP addresses two ways.
Custom Defined - enter a static IP address.
From ISP - use the IP address of a DNS server that another interface
received from its DHCP server.
The WINS (Windows Internet Naming Service) server keeps a mapping
table of the computer names on your network and the IP addresses
that they are currently using.
Type the IP addresses of up to two WINS servers to assign to the
remote users. You can specify these IP addresses two ways.
Click Apply to save your changes in the ZyWALL.
Click Reset to return the screen to its last-saved settings.
IPSec Configuration Required for L2TP
for how to create authentication method
for details). Otherwise, select any to allow
ZyWALL USG 300 User's Guide