Digi IX10 User Manual page 456

Virtual Private Networks (VPN)
c. Set the IP address of the L2TP virtual network interface:
(config vpn l2tp lns lns_server)> local_address IP_address
(config vpn l2tp lns lns_server)>
d. Set the IP address to assign to the remote peer:
(config vpn l2tp lns lns_server)> remote_address IP_address
(config vpn l2tp lns lns_server)>
e. (Optional) Set the authentication method:
(config vpn l2tp lns lns_server)> auth method
(config)>
where method is one of the following:
n
n
n
n
n
If auto, chap, pap or mschapv2 is selected, enter the Username and Password required
to authenticate:
(config vpn l2tp lns lns_server)> username username
(config vpn l2tp lns lns_server)> password password
(config vpn l2tp lns lns_server)>
The default is none.
f. (Optional) Set the metric for the tunnel:
(config vpn l2tp lns lns_server)> metric int
(config vpn l2tp lns lns_server)>
where int is an integer between 0 and 65535. The default is 1.
g. Set the firewall zone for the tunnel. This is used by packet filtering rules and access control
lists to restrict network traffic on the tunnel.
i. Use the ? to determine available zones:
(config vpn l2tp lns lns_server)> zone ?
Zone: The firewall zone assigned to this tunnel. This can be used
by packet
filtering rules and access control lists to restrict network
traffic on this
tunnel.
Format:
IX10 User Guide
none: No authentication is required.
auto: The device will attempt to connect using CHAP first, and then PAP.
chap: Uses the Challenge Handshake Authentication Profile (CHAP) to authenticate.
pap: Uses the Password Authentication Profile (PAP) to authenticate.
mschapv2: Uses the Microsoft version of the Challenge Handshake Authentication
Profile (CHAP) to authenticate.
any
L2TP
456