Example: L2Tp And Usg Behind A Nat Router - ZyXEL Communications ZyWall USG20-VPN User Manual

Table 150 Configuration > VPN > L2TP VPN (continued)
LABEL
Allowed User
Keep Alive Timer
First DNS Server,
Second DNS
Server
First WINS Server,
Second WINS
Server
Apply
Reset

25.2.1 Example: L2TP and USG Behind a NAT Router

If the USG (Z) is behind a NAT router (N), then do the following for remote clients (C) to access the
network behind the USG (Z) using L2TP over IPv4.
Create an address object in Configuration > Object > Address for the WAN IP address of the
1
NAT router.
Go to Configuration > VPN > IPSec VPN > VPN Connection and click Add for IPv4
2
Configuration to create a new VPN connection.
Select Remote Access (Server Role) as the VPN scenario for the remote client.
3
Chapter 25 L2TP VPN
DESCRIPTION
The remote user must log into the USG to use the L2TP VPN tunnel.
Select a user or user group that can use the L2TP VPN tunnel. Use Create new Object if
you need to configure a new user account. Otherwise, select any to allow any user with a
valid account and password on the USG to log in.
The USG sends a Hello message after waiting this long without receiving any traffic from
the remote user. The USG disconnects the VPN tunnel if the remote user does not
respond.
Specify the IP addresses of DNS servers to assign to the remote users. You can specify
these IP addresses two ways.
Custom Defined - enter a static IP address.
From ISP - use the IP address of a DNS server that another interface received from its
DHCP server.
The WINS (Windows Internet Naming Service) server keeps a mapping table of the
computer names on your network and the IP addresses that they are currently using.
Type the IP addresses of up to two WINS servers to assign to the remote users. You can
specify these IP addresses two ways.
Click Apply to save your changes in the USG.
Click Reset to return the screen to its last-saved settings.
USG20(W)-VPN Series User's Guide
399