D-Link DFL-1660 User Manual page 466

9.5.2. L2TP Servers
A. Start by preparing a new Local User Database:
Command-Line Interface
gw-world:/> add LocalUserDatabase UserDB
gw-world:/> cc LocalUserDatabase UserDB
gw-world:/UserDB> add User testuser Password=mypassword
Web Interface
1. Go to: User Authentication > Local User Databases > Add > Local User Database
2. Enter a suitable name for the user database, for example UserDB
3. Go to: User Authentication > Local User Databases > UserDB > Add > User
4. Now enter:
• Username: testuser
• Password: mypassword
• Confirm Password: mypassword
5. Click OK
Now we will setup the IPsec Tunnel, which will later be used in the L2TP section. As we are going to use L2TP,
the Local Network is the same IP as the IP that the L2TP tunnel will connect to, wan_ip. Furthermore, the IPsec
tunnel needs to be configured to dynamically add routes to the remote network when the tunnel is established.
B. Continue setting up the IPsec Tunnel:
Command-Line Interface
gw-world:/> add Interface IPsecTunnel l2tp_ipsec
Web Interface
1. Go to: Interfaces > IPsec > Add > IPsec Tunnel
2. Enter a name for the IPsec tunnel, for example l2tp_ipsec
3. Now enter:
a. Local Network: wan_ip
b. Remote Network: all-nets
c. Remote Endpoint: none
d. Encapsulation Mode: Transport
e. IKE Algorithms: High
f. IPsec Algorithms: esp-l2tptunnel
4. Enter 3600 in the IPsec Life Time seconds control
LocalNetwork=wan_ip
RemoteNetwork=all-nets
IKEAlgorithms=Medium
IPsecAlgorithms=esp-l2tptunnel
PSK=MyPSK
EncapsulationMode=Transport
DHCPOverIPsec=Yes
AddRouteToRemoteNet=Yes
IPsecLifeTimeKilobytes=250000
IPsecLifeTimeSeconds=3600
466
Chapter 9. VPN