Secure Computing SG300 User Manual page 210

Select the Required Encryption Level — access is denied to remote users attempting
to connect not using this encryption level. Using Strong Encryption (MPPE 128 Bit) is
recommended.
Select the Authentication Database. This allows you to indicate where the list of valid
clients can be found. You can select from the following options:
Local: Use the local database defined on the Local Users tab of the Users page.
You must enable the Dial-in Access option for the individual users that are allowed
dial-in access.
RADIUS: Use an external RADIUS server as defined on the RADIUS tab of the
Users page.
TACACS+: Use an external TACACS+ server as defined on the TACACS+ tab of the
Users page.
Note
See the Users section of the chapter entitled System for details on adding user accounts
for PPTP access, and configuring the SnapGear unit to enable authentication against a
RADIUS or TACACS+ server.
Click Submit.
Add an IPSec tunnel
Select L2TP VPN Server from the VPN section of the main menu and click the L2TP
IPSec Configuration tab. Any existing L2TP IPSec tunnels are displayed, alongside
icons to Modify and Delete them.
Authentication is performed using x.509 certificates or a pre-shared secret. You may add
a single shared secret tunnel for all remote clients authenticating using shared secrets,
an x.509 certificate tunnel for each remote client authenticating using certificates, or both.
Select Shared Secret Tunnel to use a common secret (passphrase) that is
shared between the SnapGear unit and the remote client. This authentication
method is relatively simple to configure, and relatively secure.
Virtual Private Networking
204