D-Link DFL-900 User Manual page 155

DFL-900/1500 User Manual
Step 2. Setup Windows XP/2000 L2TP
clients
Note that in the DFL-1500 release II version, both
PPTP and L2TP can support MPPE. In other
words, you can choose
encryption" while a client computer running
Windows XP/2000. However, this release II
version will not support MS-CHAP, you have to
check MS-CHAPv2 checkbox if you would like to
require data encryption.
Configuring A L2TP Dial-Up Connection
1. Configure a L2TP dial-up connection
2. Go to Start > Control Panel > Network and Internet
Connections > Make new connection.
"Require
data
3. Select Create a connection to the network of your
workplace and select Next.
4. Select Virtual Private Network Connection and select Next.
5. Give a Name the connection and select Next.
6. If the Public Network dialog box appears, choose the Don't dial
up initial connection and select Next.
7. In the VPN Server Selection dialog, enter the public IP or
hostname of the DFL-1500 to connect to and select Next.
8. Set Connection Availability to Only for myself and select
Next.
9. Select Finish.
Customize the VPN Connection
1. Right-click the icon that you have created.
2. Select Properties > Security > Advanced > Settings.
3. Select No Encryption from the Data Encryption and click Apply.
4. Select the Properties > Networking tab.
5. Select L2TP VPN from the VPN Type.
Make sure the following are selected:
6. Select Apply.
Editing Windows Registry
The default Windows 2000 L2TP traffic policy does not allow L2TP traffic
without IPSec encryption. You can disable default behavior by editing the
Windows 2000 Registry as described in the following steps. Please refer
to the Microsoft documentation for editing the Windows Registry.
1. Use the registry editor (regedit) to locate the following key in the
registry: HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \
Services \ Rasman \ Parameters
2. Add the following registry value to this key:
3. Save your changes and restart the computer.
You must add the ProhibitIpSec registry value to each Windows
2000-based endpoint computer of an L2TP or IPSec connection to
prevent the automatic filter for L2TP and IPSec traffic from being created.
When the ProhibitIpSec registry value is set to 1, your Windows
2000-based computer does not create the automatic filter that uses CA
authentication. Instead, it checks for a local or Active Directory IPSec
policy.
TCP/IP
QoS Packet Scheduler
•
Value Name: ProhibitIpSec
•
Data Type: REG_DWORD
•
Value: 1
147
Remote Access VPN – L2TP
Chapter 18