Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 674 / 1026

Example: Configuring a Policy-Based RAS VPN, L2TP
In this example, you create a RAS user group called Field Sales and configure an L2TP
tunnel called Sales_Corp, using ethernet3 (Untrust zone) as the outgoing interface for
the L2TP tunnel. The security device applies the default L2TP tunnel settings to the RAS
user group.
NOTE: An L2TP-only configuration is insecure and is recommended only for
debugging.
The remote L2TP clients are on Windows 2000 operating systems. For information on
how to configure L2TP on the remote clients, refer to Windows 2000 documentation.
Only the configuration for the security device end of the L2TP tunnel is provided below.
Configure the user and remote settings objects
1.
Configure an L2TP user object for Adam, then click OK :
• For Name, enter Adam .
•
Select Enable, then select L2TP .
• Select Password, then enter and confirm the password: AJbioJ15 .
2.
Configure an L2TP user object for Betty, then click OK :
• For Name, enter Betty .
•
Select Enable, then select L2TP .
• Select Password , then enter and confirm the password: BviPsoJ1 .
3.
Configure an L2TP user object for Carol, then click OK :
• For Name, enter Carol .
•
Select Enable , then select L2TP .
• Select Password , then enter and confirm the password: Cs10kdD3 .
4.
Create a local user group called Field Sales that includes the Adam, Betty, and Carol
local user objects.
5.
Configure the following, then click OK :
•
For Name, enter RM_L2TP .
• For Color, select green .
•
For Dns1, enter 1.1.1.2 .
•
For Dns2, enter 1.1.1.3 .
• For Wins1, enter 0.0.0.0 .
Copyright © 2010, Juniper Networks, Inc. 624
Network and Security Manager Administration Guide