L2Tp - NetComm NTC-400 Series User Manual

Item
Firewall Disabled by default.
Protection
Client IP The default setting
Address is: Dynamic IP
Tunnel MTU Mandatory field.
The default value is:
1500
Tunnel UDP The default value is:
Fragment 1500
Tunnel UDP Disabled by default.
MSS‐ Fix
nsCerType Disabled by default.
Verification
TLS The default value is:
3600
Renegotiation
Time (seconds)
Connection The default value is:
Retry (seconds) ‐1
DNS The default setting
is: Automatically
6.1.3

L2TP

Layer 2 Tunnelling Protocol (L2TP) is a tunnelling protocol used to support virtual private networks (VPNs) or as part of the
delivery of services by ISPs. It does not provide any encryption or confidentiality by itself. Rather, it relies on an encryption
protocol that it passes within the tunnel to provide privacy.
This router can behave as a L2TP server and a L2TP client both at the same time.
L2TP Server - You must have a static IP or an FQDN for clients to create L2TP tunnels. It also maintains "User Account list"
(user name/ password) for client login authentication. There is a virtual IP pool to assign virtual IP to each connected L2TP
client.
L2TP Client - Clients may be mobile users or routers in remote offices with dynamic IP addresses. To setup a tunnel, the client
should have the "user name" and "password" and global IP address of the server. In addition, you must identify the
operation mode for each tunnel as the main connection, failover for another tunnel, or load balance tunnel to increase
224 of 359
© NetComm Wireless 2019
Notes
Check  Enable to activate the Firewall Protection function.
Note – Firewall Protection will be available only when NAT is
enabled.
Specify the virtual IP Address for the OpenVPN Client as: Dynamic IP or
Static IP
Specify the value of Tunnel MTU.
Value Range: 0 - 1500.
Specify the value of Tunnel UDP Fragment.
Value Range: 0 - 1500.
Note – Tunnel UDP Fragment will be available only when UDP is
chosen in Protocol.
Check  Enable to activate the Tunnel UDP MSS‐Fix function.
Note – Tunnel UDP MSS‐Fix will be available only when UDP is
chosen in Protocol.
Check  Enable to activate the nsCerType Verification function.
Note – nsCerType Verification will be available only when TLS is
chosen in Authorization Mode.
Specify the time interval of TLS Renegotiation Time.
Value Range: ‐1 - 86400.
Specify the time interval of Connection Retry.
The default ‐1 means that it is no need to execute connection retry.
Value Range: ‐1 - 86400, and ‐1 means no retry is required.
Specify the setting of DNS: Automatically or Manually
Table 154 – OpenVPN Client Advanced Configuration
Description
User Guide