Fortinet FortiGate FortiGate-60 Administration Manual page 267

VPN
10
FortiGate-60 Administration Guide
6 If the Public Network dialog box appears, choose the appropriate initial connection
and select Next.
7 In the VPN Server Selection dialog, enter the IP address or host name of the
FortiGate unit to connect to and select Next.
8 Select Finish.
To configure the VPN connection
1 Right-click the icon that you have created.
2 Select Properties > Security.
3 Select Typical to configure typical settings.
4 Select Require data encryption.
Note: If a RADIUS server is used for authentication do not select Require data encryption.
L2TP encryption is not supported for RADIUS server authentication.
5 Select Advanced to configure advanced settings.
6 Select Settings.
7 Select Challenge Handshake Authentication Protocol (CHAP).
8 Make sure that none of the other settings are selected.
9 Select the Networking tab.
Make sure that the following options are selected:
• TCP/IP
• QoS Packet Scheduler
11 Make sure that the following options are not selected:
• File and Printer Sharing for Microsoft Networks
• Client for Microsoft Networks
To disable IPSec
1 Select the Networking tab.
2 Select Internet Protocol (TCP/IP) properties.
3 Double-click the Advanced tab.
4 Go to the Options tab and select IP security properties.
5 Make sure that Do not use IPSec is selected.
6 Select OK and close the connection properties window.
Note: The default Windows XP L2TP traffic policy does not allow L2TP traffic without IPSec
encryption. You can disable default behavior by editing the Windows XP Registry as described
in the following steps. See the Microsoft documentation for editing the Windows Registry.
7 Use the registry editor (regedit) to locate the following key in the registry:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasman\
Parameters
01-28006-0002-20041105
L2TP
267