ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Uživatelská příručka stáhnout pdf (Strana 155)

Chapter 18 L2TP VPN

ZyWALL (ZLD) CLI Reference Guide

155

Figure 23 L2TP VPN Example

• The ZyWALL has a static IP address of 172.23.37.205 for the ge3 interface.

• The remote user has a dynamic public IP address and connects through the Internet.

• You configure an IP address pool object named L2TP_POOL to assign the remote users

IP addresses from 192.168.10.10 to 192.168.10.20 for use in the L2TP VPN tunnel.

• The VPN rule allows the remote user to access the LAN_SUBNET which covers the

192.168.1.1/24 subnet.

18.5.1 Configuring the Default L2TP VPN Gateway Example

The following commands configure the Default_L2TP_VPN_GW entry.

• Configure the My Address setting. This example uses interface ge3 with static IP address

172.23.37.205.

• Configure the Pre-Shared Key. This example uses “top-secret”.

18.5.2 Configuring the Default L2TP VPN Connection Example

The following commands configure the Default_L2TP_VPN_Connection entry.

Enforce and configure the local and remote policies.

•For the Local Policy, create an address object that uses host type and contains the My

Address IP address that you configured in the Default_L2TP_VPN_GW. The address

object in this example uses IP address 172.23.37.205 and is named L2TP_IFACE.

LAN_SUBNET: 192.168.1.1/24

172.23.37.205

L2TP_POOL:

192.168.10.10~192.168.10.20

Router(config)# isakmp policy Default_L2TP_VPN_GW

Router(config-isakmp Default_L2TP_VPN_GW)# local-ip interface ge3

Router(config-isakmp Default_L2TP_VPN_GW)# authentication pre-share

Router(config-isakmp Default_L2TP_VPN_GW)# keystring top-secret

Router(config-isakmp Default_L2TP_VPN_GW)# activate

Router(config-isakmp Default_L2TP_VPN_GW)# exit

Router(config)#

1 2 ... 150 151 152 153 154 155 156 157 158 159 160 ... 385 386

Žádné komentáře

ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Uživatelská příručka Strana 155