Digi IX40 User Manual page 490

Virtual Private Networks (VPN)
(config vpn l2tp lns lns_server)> lac IP_address
(config vpn l2tp lns lns_server)>
This can also be:
n
n
c. Set the IP address of the L2TP virtual network interface:
(config vpn l2tp lns lns_server)> local_address IP_address
(config vpn l2tp lns lns_server)>
d. Set the IP address to assign to the remote peer:
(config vpn l2tp lns lns_server)> remote_address IP_address
(config vpn l2tp lns lns_server)>
e. (Optional) Set the authentication method:
(config vpn l2tp lns lns_server)> auth method
(config)>
where method is one of the following:
n
n
n
n
n
If auto, chap, pap or mschapv2 is selected, enter the Username and Password required
to authenticate:
(config vpn l2tp lns lns_server)> username username
(config vpn l2tp lns lns_server)> password password
(config vpn l2tp lns lns_server)>
The default is none.
f. (Optional) Set the metric for the tunnel:
(config vpn l2tp lns lns_server)> metric int
(config vpn l2tp lns lns_server)>
where int is an integer between 0 and 65535. The default is 1.
g. Set the firewall zone for the tunnel. This is used by packet filtering rules and access control
lists to restrict network traffic on the tunnel.
IX40 User Guide
A range of IP addresses, using the format x.x.x.x-y.y.y.y, for example 192.168.188.1-
192.168.188.254.
The keyword any, which means that the server will accept connections from any IP
address.
none: No authentication is required.
auto: The device will attempt to connect using CHAP first, and then PAP.
chap: Uses the Challenge Handshake Authentication Profile (CHAP) to authenticate.
pap: Uses the Password Authentication Profile (PAP) to authenticate.
mschapv2: Uses the Microsoft version of the Challenge Handshake Authentication
Profile (CHAP) to authenticate.
L2TP
490