Huawei BM2022, User Manual

Page: 128 / 282

Chapter 8 Security
BM2022 Users Guide
132
Click Security > L2TP VPN > L2TP Client > Add to open this screen as shown next.
Figure 66
L2TP Client: Add
This screen contains the following fields:
Table 54 L2TP Client: Add
LABEL DESCRIPTION
Profile Name Enter the name for this client connection.
L2TP Protocol
Version Select the L2TP Protocol Version 2 or 3 . L2TPv2 is a standard method for
tunneling Point-to-Point Protocol (PPP) while L2TPv3 provides improved support
for other types of networks including frame relay and ATM.
NAT Mode? Select Yes if the client will be located behind a NAT enabled router. This will
allow multiple clients using NAT to connect with L2TP at the same time.
Auth Protocol Select the Authentication Protocol allowed for the connection. Options are:
PAP - Password Authentication Protocol (PAP) authentication occurs in clear text
and does not use encryption. Its probably not a good idea to rely on this for
security.
CHAP - Challenge Handshake Authentication Protocol (CHAP) provides
authentication through a shared secret key and uses a three way handshake.
MSCHAPv1 - Microsoft CHAP v1 (MSCHAPv1) provides authentication through a
shared secret key and uses a three way handshake. It provides improved
usability with Microsoft products.
MSCHAPv2 - Microsoft CHAP v2 (MSCHAPv2) provides encryption through a
shared secret key and uses a three way handshake. It provides additional
security over
MSCHAPv1 , including two-way authentication.
MPPE Encryption If MSCHAPv1 or MSCHAPv2 is selected as an Auth Protocol , use the drop-
down list box to select the type of Microsoft Point-to-Point Encryption (MPPE).
Options are:
MPPE 40 - MPPE with 40 bit session key length
MPPE 128 - MPPE with 128 bit session key length
Auto - Automatically select either MPPE 40 or MPPE 128
MPPE Stateful? Select Yes to enable stateful MPPE encryption. This can increase performance
over stateless MPPE, but should not be used in lossy network environments like
layer two tunnels over the Internet.
Server IP Address Enter the IP address of the L2TP server.