Pptp/L2Tp Parameters Tab; Use Client Address; Pptp Authentication Protocols - Cisco VPN 3000 User Manual

12
User Management
Figure 12-4: Configuration | User Management | Base Group screen, PPTP/L2TP tab

PPTP/L2TP Parameters tab

This tab lets you configure PPTP and L2TP parameters that apply to the base group. During tunnel
establishment, the client and server negotiate access and usage based on these parameters. Only clients
that meet these criteria are allowed access. If you checked PPTP , L2TP , or L2TP over IPSec under Tunneling
Protocols

Use Client Address

Check the box to accept and use an IP address that the client supplies. A client must have an IP address
to function as a tunnel endpoint; but for maximum security, we recommend that you control IP address
assignment and not allow client-supplied IP addresses (the default).
Make sure the setting here is consistent with the setting for Use Client Address on the Configuration | System
| Address Management | Assignment

PPTP Authentication Protocols

Check the boxes for the authentication protocols that PPTP clients can use. To establish and use a VPN
tunnel, users should be authenticated according to some protocol.
Caution:
Unchecking all authentication options means that no authentication is required. That is, PPTP users can
connect with no authentication. This configuration is allowed so you can test connections, but it is not
secure.
12-12
on the General Parameters tab, configure these parameters.
screen.
VPN 3000 Concentrator Series User Guide