Page 40 - Configuration Examples
L2TP/IPSec between two IP Office’s
The network consists of an IP412 at the corporate office and a number of IP Office -
Small Office Editions at the branch offices. These are linked to the Internet using
xDSL/Internet routers. The configuration utilizes NAT functionality to access the
Internet and IPSec to establish a secure VPN between the two sites. The network
provides the following benefits:
•
Secure VPN data networking for shared resources
•
Internet access for corporate users
•
Secure IP telephony between corporate sites
The following example can be used to form the basis of a star networking VPN topology
where the corporate office IP412 (IPO_CO) is the central VPN terminator and the
PABX/data router for several remote branch offices equipped with IP Office - Small
Office Editions.
Figure 20. L2TP/IPSec - IP Office to IP Office
The general method of configuration used in this example is:
1. Configure and test IP connectivity between the two peers.
2. Configure the LTP2 tunnel parameters and test.
3. Configure the IPSec tunnel parameters and test.
This procedure is divided into two parts
•
Part 1 = L2TP configuration (see page 41).
•
Part 2 = IPSec configuration (see page 43)
Both parts provide details of corporate office to branch office No. 1 only. However, to
add additional branch offices, repeat the procedures using the relevant details for the
subsequent branch offices.
Page 40 - Configuration Examples
IP Office (R3.0)
Part 2: VPN configuration
40DHB0002UKER Issue 3 (4th February 2005)