Table of Contents
Advertisement
Virtual Private Network – L2TP
Step 2 – Setup Windows XP/2000 L2TP
clients
Configuring A L2TP Dial-Up Connection
1. Configure a L2TP dial-up connection
2. Go to Start > Control Panel > Network and Internet
Connections > Make new connection.
3. Select Create a connection to the network of your
workplace and select Next.
4. Select Virtual Private Network Connection and select Next.
5. Give a Name the connection and select Next.
6. If the Public Network dialog box appears, choose the Don't dial
up initial connection and select Next.
7. In the VPN Server Selection dialog, enter the public IP or
hostname of the DFL-1500 to connect to and select Next.
8. Set Connection Availability to Only for myself and select
Next.
9. Select Finish.
Customize the VPN Connection
1. Right-click the icon that you have created.
2. Select Properties > Security > Advanced > Settings.
3. Select No Encryption from the Data Encryption and click Apply.
4. Select the Properties > Networking tab.
5. Select L2TP VPN from the VPN Type.
Make sure the following are selected:
TCP/IP
QoS Packet Scheduler
6. Select Apply.
Editing Windows Registry
The default Windows 2000 L2TP traffic policy does not allow L2TP traffic
without IPSec encryption. You can disable default behavior by editing the
Windows 2000 Registry as described in the following steps. Please refer
to the Microsoft documentation for editing the Windows Registry.
1. Use the registry editor (regedit) to locate the following key in the
registry: HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \
Services \ Rasman \ Parameters
2. Add the following registry value to this key:
•
Value Name: ProhibitIpSec
•
Data Type: REG_DWORD
•
Value: 1
3. Save your changes and restart the computer.
You must add the ProhibitIpSec registry value to each Windows
2000-based endpoint computer of an L2TP or IPSec connection to
prevent the automatic filter for L2TP and IPSec traffic from being created.
When the ProhibitIpSec registry value is set to 1, your Windows
2000-based computer does not create the automatic filter that uses CA
authentication. Instead, it checks for a local or Active Directory IPSec
policy.
81
DFL-1500 User Manual
Advertisement
Table of Contents
